Re:Tumblr security hole (the gaping kind)
by tbourdon on Tuesday April 15, 2008 @08:30PM
(#164706)
And a non-existant QA department apparently?
[ Parent
| on HN ]
QA departments are notorious for not being very creative. You'd need a star QA department to find the /admin hole, I think.
Re:Tumblr security hole (the gaping kind)
by cstejerean on Wednesday April 16, 2008 @02:06AM
(#164916)
No, you just need functional tests. Having these kind of bugs in a spare time project is fine, but if you call yourself a startup and ask customers to trust you with data, you need to seriously consider security issues.