Java Security Plagued By Crappy Docs, Complex APIs, Bad Advice
... researchers from Virginia Tech contend more care needs to be taken when copying code from accepted Stack Overflow answers, at least in the context of Java. ... they found that many of the answers endorsed by the Stack Overflow community led to insecure code. For example, accepted answers often recommended the use of MD5 and SHA-1 crypto algorithms – despite the fact that they're insecure and should not be used. ... They also observed that in some instances, the higher social reputation of Stack Overflow respondents led to incorrect answers being accepted over more correct fixes offered by individuals with lesser reputation scores. <http://www.theregister.co.uk/2017/09/29/java_security_plagued_stack_overflow/>
... researchers from Virginia Tech contend more care needs to be taken when copying code from accepted Stack Overflow answers, at least in the context of Java.
... they found that many of the answers endorsed by the Stack Overflow community led to insecure code. For example, accepted answers often recommended the use of MD5 and SHA-1 crypto algorithms – despite the fact that they're insecure and should not be used.
...
They also observed that in some instances, the higher social reputation of Stack Overflow respondents led to incorrect answers being accepted over more correct fixes offered by individuals with lesser reputation scores.
<http://www.theregister.co.uk/2017/09/29/java_security_plagued_stack_overflow/>
The latter applies to pretty much any human community. Statements from an expert with lots of experience are usually accepted without dissemination, opposed to a junior in the field ("alpha" individual >> "omega" individual). Academia or the business world, for instance, are no different. Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/
On Sat, 30 Sep 2017 11:06:24 +1300, Peter Reutemann wrote:
Statements from an expert with lots of experience are usually accepted without dissemination, opposed to a junior in the field ("alpha" individual >> "omega" individual). Academia or the business world, for instance, are no different.
Does a system of assigning point scores to people make things better ... or worse?
participants (2)
-
Lawrence D'Oliveiro -
Peter Reutemann