DEV Community

5 must-do security tips for developers

Paula on July 21, 2019

So I've been working as a security analyst and auditor for a while and I encountered a lot of stuff I felt frustrated about. Sometimes I used to th...
Collapse
 
jbeetz profile image
J Beetz • Edited

Great article!

I would add being mindful of the dependencies one chooses to use in their apps. Out of date dependencies are plentiful.

What is your opinion / thoughts on third party authentication, such as login with Google, etc..?

Collapse
 
terceranexus6 profile image
Paula

It depends, I think it can be convenient, I'm not a Google fan tho. Not due to security (which I think it's quite strong) but due to privacy and data processing.

Collapse
 
mdhesari profile image
Mohammad Fazel

Thanks for the article keep writing!

Collapse
 
terceranexus6 profile image
Paula

thank you! I'm glad you enjoyed it.

Collapse
 
ghost profile image
Ghost

specially

Tip 3: Avoid the “It’s secure because it’s in a container”

I keep hearing that one with Docker, even though their devs themselves had repeatedly said that containers are not about security, at all, is about ease to deploy and dependency management.

Collapse
 
droidmakk profile image
Afroze Kabeer Khan. M

Article's good but loved the Gifs... 🔥🤟

Collapse
 
terceranexus6 profile image
Paula

Hahaha thank you

Collapse
 
niclaslindgren84 profile image
Niclas Lindgren • Edited

Owasp provides an extensive overview as well as a top ten list:

owasp.org/index.php/Category:OWASP...

Injection is for example the number one vulnerability.