Unfortunately, everyday programmers mostly know very little about security.
If you really want security, it's something that every programmer should be thinking about, at least in the back of their mind, on every line of code they write.
If you really want security, it's something that every programmer should be thinking about, at least in the back of their mind, on every line of code they write.
And if it's possible, And we already have a few such tools(like say scala lift, ARM mbed ) but somehow haven't yet became popular, why is that ?
Because an API that provides security for free is a laughable proposition.
Unless you're doing this with some level of competence, it's probably wrong.
Making line developers competent at security is a nice idea, but you have about 27 other things people have said that developers should be good at alongside of security.
I have had to do several 'security' training sessions. I understand it intellectually, but they don't instill a deep understanding.
Start out with things like, "don't leave your telnet port open" which seems obvious, but apparently is hard for a lot of people. Then from there lead to a reasonable understanding of metasploit.