Which is quite astounding. These aren't novice programmers fresh from a comp-sci course and in to the big bad world. Making this kind of mistake (which is a mis

Which is quite astounding. These aren't novice programmers fresh from a comp-sci course and in to the big bad world. Making this kind of mistake (which is a mistake on not one, but many grounds) is extraordinary. It's as if the ideas of idempotence, REST, basic security, treating external input as hostile, etc. have never even been mentioned between them. I'm not foolish enough to imagine that this is anything other than a blip for them - their first mover momentum and market dominance is invincible for the time being, but they don't deserve it if they keep putting users at risk as casually as they seem to be. So far, we've seen nothing too nasty (though this could be embarrassing I suppose), but it's a bad sign looking ahead.