[wredue]

It isn't malice dude. Unfortunately, it really is just that 70% of developers are utterly incompetent.

[tsimionescu]

If having security vulnerabilities in code you wrote or reviewed is a sign of incompetence, then there has probably never been a competent developer in the history of the industry.

[wredue]

I wouldn’t say that. There are some not obvious things like timing attacks that you probably shouldn’t feel bad about.

If you’re still writing sql injections though, yeah, you’re terrible.