Haskell

No, who has time? Security is not a priority. If someone discover a flaw that puts our costumers at risk we can correct it as soon as possible. And with a good crisis management we can avoid a PR nightmare if any user…

Yes. We have a formal security process, which includes threat modeling, secure programming and core reviews. We also use metrics to evaluate performance.

No, but it will certainly hurt in the future. The code base is plagued with flaws and some bad security architecture decisions are being done. It will be very difficult to modify later. I wish we would care more about…

I would like to capture the general perception about secure development in startups. Please, also keep in mind that even if your startup doesn't process users' private information (such as financial data or email), your…

Yes. We don't understand much about security, but we have an "ad hoc process", which means we try to avoid a few bad practices if time permits.

No. Our users don't care and nor do I.

Yes, but we don't have a process. We are security wizards and we write secure code even sleeping.

test

test

Speaking about Apple's fall in the 90s, Steve Jobs says: "Apple had a monopoly on the graphical user interface for almost 10 years. That's a long time." [1] Then he asks: "And how are monopolies lost?", following with…