top | item 46273030

(no title)

javaunsafe2019 | 2 months ago

So We make things hard in the backend because of leaky abstractions? Doesn't make sense imo.

discuss

order

jcims|2 months ago

Decades of security vulnerabilities and compromises because of sequential/guessable PKs is (only!) part of the reason we're here. Miss an authorization check anywhere in the application and you're spoon-feeding entire tables to anyone with the inclination to ask for it.