korrents
David Heinemeier Hansson

What David Heinemeier Hansson thinks about cybersecurity

@dhh · 695 positions · 10 changes of mind

Creator of Ruby on Rails, CTO of 37signals, and creator of Omarchy.

Everything they publish, on ppll ↗ Who they are, on wiqqi ↗

David Heinemeier Hansson did not write this page.

We collected these quotes from things they published elsewhere, and every quote links to where it was said. They have no account here and have not endorsed this site. Quotes are word for word; the short line under each one is our own restatement, not their wording. Their own site. Is this you? Claim it or ask us to remove it. Or tell us what is wrong here.

8 dated positions, 2021 to 2026, in their own words. Our reading of what David Heinemeier Hansson has said — not written or endorsed by them.

  1. Our readingAI has passed nearly every human at finding security vulnerabilities, because the work is chaining together small flaws that are harmless on their own.

    Their wordsSo the irony here is that when you look at that field, it seems like we've reached levels of intelligence that virtually no human can match because many of these security holes are about stringing combo moves together. You find one little vulnerability here that by itself might not be the worst thing in the world, but then you combine it with four others, and suddenly you have RCE, remote command execution. Humans who are able to do that are very rare.

    ↗DHH: Future of Programming, AI, Agentic Engineering, Vibe Coding & Linux | Lex Fridman Podcast #501youtube.com 3rd of 41 in this recording

  2. 24 months earlier

  3. Our readingPasskeys can become a halfway house to a password manager

    Their wordsThe problem with passkeys is that they're essentially a halfway house to a password manager

    ↗Passwords have problems, but passkeys have moreworld.hey.com 1st of 3 in this piece

  5. Our readingPasskeys are not a better solution than passwords

    Their wordsAnd at the moment, I don't see how passkeys are actually better

    ↗Passwords have problems, but passkeys have moreworld.hey.com 2nd of 3 in this piece

  6. 6 months earlier

  7. Our readingHaving all computing eggs in one basket leaves you vulnerable to predatory behavior

    Their wordshaving all your computing eggs in one basket leaves you mighty vulnerable to predatory behavior

    ↗You can own more than one type of computer!world.hey.com 1st of 2 in this piece

  8. 4 weeks earlier

  9. Our readingIt's never been easier to confidently connect a computer to the internet and have it serve up a web app securely

    Their wordsit's never been easier to confidently connect a computer to the internet, and have it serve up a web app securely on port 443

    ↗Dare to connect a server to the internetworld.hey.com 2nd of 2 in this piece

  10. 2 years earlier

  11. Our readingThe Mac is a secure platform without an App Store

    Their wordsWith the Mac, we have almost forty years of proof that computers don't need an App Store to be safe

    ↗The Mac proves Apple can safely open the iPhoneworld.hey.com 1st of 2 in this piece

  12. 9 months earlier

  13. Our readingSecurity on the internet is based on system-level protective techniques

    Their wordssecurity on the internet is instead based on hardened browsers, isolated processes, restricted device access, and other system-level protective techniques

    ↗The App Store is broken because it wasn't designed to workworld.hey.com 2nd of 3 in this piece

  14. 5 weeks earlier

  15. Our readingThe internet can be a grim place

    Their wordsThe internet can be a pretty grim place, and if you're building software here, you better think about how it can be abused, because odds are that it will

    ↗Thinking about HEY World's potential for abuseworld.hey.com