Hi Tanya! Thanks for sharing! Unfortunately from what i see, from a startup / SME background,“secure coding” is still very much an afterthought. Often time we want to ship fast and say “let’s think about security later”. We make it works before we make it good. But when it comes to launch day, we will be spending all of our time fighting bugs, and once we are rather stable, management will want more features, and security will only be left till when something happened. Which might have been too late. So i think building awareness is very important! We need more people like you to spread the words, so that not just developers know security is important, but business owners too. I have seen an uptrend in more security aware business owners. They are starting to ask if about SSL, or some less tech savvy ones will ask if there is a lock on the browser. 😂 all thanks to many of our security conscious developers working on the background to make this space better. As I work for small businesses, we cannot afford dedicated security team to pentest and harden our system. We tend to rely more on framework and libraries to do the heavy lifting for us. Awareness aside, I think a better and more secure software means we need better tooling. One example I can think of is to have a security tool directly on the browser devtools. Instead of having to use external tool like burp suite, have it built in to our devtools and make it easy for everyone to use. Or at least detect the most common vulnerabilities. More on reddit.com

It drives me nuts that they push for proprietary things like Play integrity. That shit is cancer to truly owning your devices. More on reddit.com