I appreciate that they are not memorializing this as a “hack.” That’s a mature stance. However: Sarcasm alert: so the gist is engineering is hard and we should

I appreciate that they are not memorializing this as a “hack.” That’s a mature stance. However: Sarcasm alert: so the gist is engineering is hard and we should never assume actors within a system will act predictably: you don’t say! Security is hard, but necessary, it’s never convenient. It takes relentless discipline and suspicion, which is dissonant in conventional software team dynamics. I hear it time and time again, “this isn’t an issue” Every time a story comes out like this, I think about how ill-equipped these organizations must be in mitigating these breaches.