2 ms·
Coinbase's tone at https://hackerone.com/reports/5200 https://hackerone.com/reports/5200 convinces me that they just don't care about user account enumeration.
by wes-exp 13y ago
Coinbase's tone at https://hackerone.com/reports/5200 https://hackerone.com/reports/5200 convinces me that they just don't care about user account enumeration. Combined with the blog post, my sense is that Coinbase does not deny that systematic enumeration is possible; rather, they deny that we should worry about it. ("it's not a bug, it's a feature")
- tptacek 13y agoI don't know if they do or don't, but I wouldn't be surprised either way, because I sure don't care about user account enumeration. We doc it, but I'm always embarrassed when we do.