Falsehoods programmers believe about authorization | Dark Hacker News