3 ms·
I am hoping not much, because that is beyond a horrible "security practice". I have seen some lazy shit out there, but this would take the cake.
by hitpointdrew 7y ago
I am hoping not much, because that is beyond a horrible "security practice". I have seen some lazy shit out there, but this would take the cake.
- Causality1 7y agoIf I recall correctly there was a large company several years ago who tried to prosecute a whitehat who discovered their user account pages included the users' e-mail addresses and that changing the address to that of a different user would drop you right into that user's page with all their personal information listed.