4 ms·
The problem is they probably don’t have full time developers. They probably built the app once years ago via a dev shop and then never updated it again. The tal
by itake 2y ago
The problem is they probably don’t have full time developers. They probably built the app once years ago via a dev shop and then never updated it again. The talent moved on and updating it is expensive now.
- benoau 2y agoCost minimizing aligns well with the criminal-negligence theory. In fact every egregious security issue I've come across, like plain text passwords, public S3 buckets, publicly-accessible internal tools... it all directly correlates to being cheap in my experience.
- forgotacc240419 2y agoThey had turnover of £39m last year and profits of £5.5m (double the previous year, quite good for a UK business of this scale). If they don't have full time devs it'll be shocking, certainly had the money to sort crap like this out
- tirpen 2y agoThey (or someone they hired) actually rewrote their whole app about a year ago, I remember seeing lots of people complaining about how much worse and buggier it got after the rewrite. I have no idea if the back end was also replaced then or if the vulnerabilities were present in the previous version as well.