> Just because a bug is simple, don't assume that it isn't there. That really is an interesting conclusion, because when I think about security, my mind is alw

> Just because a bug is simple, don't assume that it isn't there. That really is an interesting conclusion, because when I think about security, my mind is always like "don’t bother looking, surely there are no low-hanging fruit". And then an article like this pops up and proves the opposite. Well done and a nice read.