4 ms·
> This means the credentials from the original implementation of said feature weren't locked down to only data available from your viewable profile. Yeah, that
by a13n 8y ago
> This means the credentials from the original implementation of said feature weren't locked down to only data available from your viewable profile.
Yeah, that's the entire security incident. So are you saying you expect software companies to never have security incidents? Now that's ridiculous.
- panic 8y agoWhy is that ridiculous?
- Kalium 8y agoIt's only possible with a very different set of tradeoffs around risk and innovation than are the norm in software. It takes NASA-grade layers of slow development processes to be 100% certain that there will never be any incidents. Most companies, most developers, and most consumers would not be happy with the cost and speed this would result in. In short: it's not that it's impossible. We know how to do it. It just comes with a cost attached that nobody wants to pay.
- YetAnotherNick 8y agoLet me ask you this: Have you done any programming yourself? Facebook has some of the best information security researchers, takes bug bounty seriously, and they have got very low hacks compared to the effort hackers put to hack it.
- deleted 8y ago[deleted]