> I mean, they already demonstrated incompetency. Finding more vulnerabilities at this point is very much expected. You mean they've demonstrated that their se

> I mean, they already demonstrated incompetency. Finding more vulnerabilities at this point is very much expected. You mean they've demonstrated that their security model is non-traditional? The point is that the CSRF login is probably a more significant attack vector, and many sites are vulnerable to such an attack. Did you know the website you're using right now is vulnerable to a CSRF login attack? [0] [0] https://maxdamantus.github.io/yccsrf.html https://maxdamantus.github.io/yccsrf.html