I see a lot of comments on sequential as the issue. Really is that the issue? Not the fact that John Doe can get to John Doe2 stuff without authenticating? WTF Sequential or not if no auth I can run a scanner and get it…
Lol everyone fights security and it is way under funded so can only get like 1 out of 100 risks fixed but must be securities fault.
Programmers fault? Audits fault? Securities fault? Pentesters fault? It fault? Listen until C-level funds these programs properly and security is taken seriously by all issues like this will forever be in the news. I…
I see a lot of comments on sequential as the issue. Really is that the issue? Not the fact that John Doe can get to John Doe2 stuff without authenticating? WTF Sequential or not if no auth I can run a scanner and get it…
Lol everyone fights security and it is way under funded so can only get like 1 out of 100 risks fixed but must be securities fault.
Programmers fault? Audits fault? Securities fault? Pentesters fault? It fault? Listen until C-level funds these programs properly and security is taken seriously by all issues like this will forever be in the news. I…