3 ms·

I would love to hear how these were all patched. Wrap everything in a transaction? Use some kind of MQ? Make sure these critical DB calls are not cached in any

• EGreg 10y ago
  Um, simply generate a new code for every time an email is attached. Why not?
  • simplify 10y ago
    Instead of downvoting this comment, why not explain why they're wrong, both for the benefit of them and other readers?
    • sbuttgereit 10y ago
      Staying off topic for a moment... I bet there's an interesting study in this. Something along the lines of neurochemical or psychological rewards when one does something like "downvote" in self-regulating forum like this; seems like it would be narrowly focused enough an as compared to say, trolling, that you might be able discern something in from that sort of behavior. (I'm clearly no scientist :-) ) For the record I agree with you. I think when someone says something that is silly, naive, or somehow just wrong in a forum like this... it seems like it would be far more productive to both participants and observers to have someone just point out what's wrong (yes, that takes time, but you cared enough to down vote, right?) Some part of the time you'll just uncover a misunderstanding or actually find out the person that would otherwise be down voted may have had a point. Oh well... back to work.
• ejcx 10y ago
  Having patched one of this researchers race conditions, while I was at lastpass, I did exactly that. This only applies to coupon redemption
  • corobo 10y ago
    Which one?