[hnreport]

This the type of comment that reinforces not even trying to learn or outsource security.

You’ll never know enough.

[petesergeant]

I think the opposite? I’m a dev with a bit of an interest in security, and this immediately jumped out at me from the story; knowing enough security to discard bad ideas is useful.