news.ycombinator.com• 5d ago• 1 min read
Ask HN: What a fullstack dev should know about security?Hi all,I am asked to help a fullstack dev team (Spring+Angular) to skill up in term of security.I am skeptical about fullstack profiles, how many fullstack devs knows in depth display:flex and in the same time transaction isolation level ?So as fullstack devs they are not supposed to become cyber-security experts in their company but since they don't have a cyber-security expert they must level up so they don't put their company at risk. Even if they hire one they must know all the basics that are related to development so they will be able to follow their cyber-security expert recommendations. They are not newbies, for instance they know about sql injection.Here is my checklist (I'll help them to learn all of that), what to you think ? There will be half theory and half practice.Introduction * Cryptography and security: two distinct domains. * Wording: hashing, encryption, key, certificate, signature, foward secrecy, CVC, zero thrust. * OWASP Top Ten 2025 and CWC Top 25 2025. * Securi