---
id: 1713
title: "how to make a website hard to hack"
source_domain: josephthacker.com
source_url: "https://josephthacker.com/hacking/cybersecurity/2022/08/03/how-to-make-a-website-hard-to-hack.html"
published_at: "2022-08-03T00:00:00Z"
tags: ["bug-bounty", "web-security", "architecture", "authorization"]
phying_url: "https://phying.com/item/1713"
lang: en
---

# how to make a website hard to hack

## Summary

Joseph Thacker lists design decisions that make websites significantly harder to hack: session-based authorization instead of object IDs in paths, simple RBAC schemes instead of granular roles, and strict organization-level data segregation.

## Intelligence Metadata

- **Sources:** josephthacker.com
- **Published:** 2022-08-03T00:00:00Z
- **Original:** https://josephthacker.com/hacking/cybersecurity/2022/08/03/how-to-make-a-website-hard-to-hack.html
- **Phying News:** https://phying.com/item/1713