3 ms·
> Well that's embarrassing. An IDOR is embarrassing - this was a complex bug and Github's investigation/response was great here. I'd be proud if my company han
by arkadiyt 6y ago
> Well that's embarrassing.
An IDOR is embarrassing - this was a complex bug and Github's investigation/response was great here. I'd be proud if my company handled a security incident like this.
- yarg 6y agoIt can be both.
- brainzap 6y agowhy the acronym
- alpaca128 6y agoFor the people as confused as me, it stands for "Insecure Direct Object Reference" and not "International Day of Radiology" or "Iowa Department of Revenue".
- arghwhat 6y agoCreating such unnecessary complexity that should ahead of time be known to be fragile, and then having these resulting issues, is embarrassing. The follow-up report is good, but it doesn't matter when the conclusion is "our footguns backfired".
- renewiltord 6y agoAs someone who has never added incremental complexity to software until it manifested bugs, I agree.