After reading the top comment on this article:<p>https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10969843<p>I was wondering if anyone can point me towards some good resources that teach the <i>philosophy</i> of defensive programming. I say philosophy, because I already know about some sites that talk about security (OWASP, etc...). But I am intrigued about the idea of defensive programming.<p>The reason I am asking is because I am working on a mobile app with a conjoined website, (python stack through and through :) and I am horrified by the mistakes I see people make and would like to avoid the more common ones.<p>&lt;rant&gt; As an aside, I would like to see the security community do a little outreach to conscientious devs about <i>implementing</i> security besides from the tired &quot;security is hard&quot; and &quot;Don&#x27;t roll your own&quot;. I understand the 2nd one, and take it to heart, but the first one doesn&#x27;t help man nor beast. Yes, it&#x27;s hard, now what do I have to do to be as safe as possible? &lt;&#x2F;rant&gt;
Ask HN: Resources for learning Defensive Programming