News for hackers. Stuff that matters.
Re:Tumblr security hole (the gaping kind) by tbourdon on Tuesday April 15, 2008 @08:30PM (#164706)
And a non-existant QA department apparently?
Re:Tumblr security hole (the gaping kind) by sohail on Wednesday April 16, 2008 @01:55AM (#164911)
QA departments are notorious for not being very creative. You'd need a star QA department to find the /admin hole, I think.
Re:Tumblr security hole (the gaping kind) by cstejerean on Wednesday April 16, 2008 @02:06AM (#164916)
No, you just need functional tests. Having these kind of bugs in a spare time project is fine, but if you call yourself a startup and ask customers to trust you with data, you need to seriously consider security issues.
Re:Tumblr security hole (the gaping kind) by agentbleu on Wednesday April 16, 2008 @04:46AM (#165015)
yea i mean it seems to be a first step obvious point.