2 ms·
This assumes it was by design, likely someone unfamiliar with the security implications thought they were improving the customer experience by not failing hard.
by lumost 6y ago
This assumes it was by design, likely someone unfamiliar with the security implications thought they were improving the customer experience by not failing hard.
- OJFord 6y agoOr just oversight, could actually be embarrassingly easy to mess up: if not twilio_authenticate(user, pass): return Err() return User(user) and: def twilio_authenticate(user, pass): try: return twilio.verify(user) except: return False Might independently look reasonable enough.