Falsehoods programmers believe about authorization | Hacker News Reader