Ask HN: What's the hardest thing to secure in a web-app? | Dark Hacker News