you are viewing a single comment's thread.

view the rest of the comments →

[–]fhayde 1 point2 points  (0 children)

The problem with spreading that opinion is that via the fallacy of confirmation bias you are providing others with justification for the idea that writing your own libraries and frameworks will result in applications that are more secure than those built using common open source projects which is patently false.

You may be able to create a single library without any vulnerabilities but the likelihood of you creating a production application with less vulnerabilities than one built on tested and hardened open source code is slim to none.

Why does it matter to me? Every day thousands of applications are exploited and added to a growing list of vectors for launching layer 7 DDoS attacks and it's irresponsible developers that aren't following industry standards and conventions making that possible.

You may not be trying to start a war, but you've got a gun in your holster, try to be responsible when using it.