[tsimionescu]

If having security vulnerabilities in code you wrote or reviewed is a sign of incompetence, then there has probably never been a competent developer in the history of the industry.

[wredue]

I wouldn’t say that. There are some not obvious things like timing attacks that you probably shouldn’t feel bad about.

If you’re still writing sql injections though, yeah, you’re terrible.