Hacker News Reader

How can you be a security expert insofar as the domain is software if you can't code?

They can understand common patterns and find problems. That doesn't mean they can fix them.

You can probably tell people how to physically secure their premises or not to put passwords on post it notes without knowing how to code but you can't help them write secure code if you can't you know code.

This is like taking drivers ed from someone who can't drive. In theory you could reiterate material you had read on the matter and some material may even be of value but only a fool would learn to drive from someone who can't.

The fact that not everyone is willing or able to see the emperor is a nudist doesn't mean his threads are real.

Many code-related security problems can be discovered externally without even seeing the code (simple examples: XSS attacks, SQL injection problems, etc.) Generic advice like "escape your inputs" can be provided. I am not saying this is valuable advice...

Honestly, I have no clue. That's a question for the security experts on Twitter.

Reply on news.ycombinator.com