3 ms·
Since you're a security pro, why do you think this is the right amount? Because of the ease/difficulty in exploiting it? How much damage could have been done t
by waterside81 13y ago
Since you're a security pro, why do you think this is the right amount? Because of the ease/difficulty in exploiting it?
How much damage could have been done to FB's credibility if this guy had been malicious?
I suppose it's damned if you do, damned if you don't.
- tptacek 13y agoIt's just about what Google pays for auth bypass on sensitive servers. "How much damage could have been done" doesn't really enter into the calculation. I'm not seeing how anyone's damned here.
- deleted 13y ago[deleted]