JimmyDugan

3 ms·

1. 1.▲
   by JimmyDugan 7y ago

   I see a lot of comments on sequential as the issue. Really is that the issue? Not the fact that John Doe can get to John Doe2 stuff without authenticating? WTF Sequential or not if no auth I can run a scanner and get it all so what the hell
2. 2.▲
   by JimmyDugan 7y ago

   Lol everyone fights security and it is way under funded so can only get like 1 out of 100 risks fixed but must be securities fault.
3. 3.▲
   by JimmyDugan 7y ago

   Programmers fault? Audits fault? Securities fault? Pentesters fault? It fault? Listen until C-level funds these programs properly and security is taken seriously by all issues like this will forever be in the news. I would be willing to bet