Saddest part is that this sort of stuff or at least not proper authorization checks is very common. I do not really know what is the solution at this point. Cle

Saddest part is that this sort of stuff or at least not proper authorization checks is very common. I do not really know what is the solution at this point. Clearly not enough developers care. Or can stop it... Is it education problem? If so if there was training budget a day or two running against some simple capture the flag exercise might do a lot...