11 ms·
I agree with you. Let me emphasize this explicitly: the real failure here is the utter lack of authn and authz. But it is meaningful that the integer IDs are be
by throwawaymath 7y ago
I agree with you. Let me emphasize this explicitly: the real failure here is the utter lack of authn and authz. But it is meaningful that the integer IDs are being used.
- edoceo 7y agoOne reason I <3 HN is that complex scenarios like this get described so clearly, succinctly like this. I couldn't say it better myself when I'm speaking to management that makes these kinds of decisions. Now I can quote throwawaymath verbatim to drive the detailed point home. Thanks!
- PatrolX 7y ago> I agree with you. Let me emphasize this explicitly: the real failure here is the utter lack of authn and authz. Bingo.