see: that article from a few weeks ago chronicling that guy's 10 year journey exposing a serious bug in his bank's website where no CSRF is implemented. spoile

see: that article from a few weeks ago chronicling that guy's 10 year journey exposing a serious bug in his bank's website where no CSRF is implemented. spoiler: it still exists, and their solution was to have him sign his soul away and shut up about it. one day (!!!)