News for hackers. Stuff that matters.

A comment on Coding Flaw Exposes Voter Details for 6.5M Israelis. Parent comment

Re:Coding Flaw Exposes Voter Details for 6.5M Israelis by theflyinghorse on Tuesday February 11, 2020 @05:03PM (#22303409)
> ... but the person who had the idea of exposing an api endpoint to get admin user and password in cleartext ....

I'd be hesitant to call out one person. A process failed. Where were the code reviews, design sessions, pentesters, QA, UAT, automated tests?

[ Parent | on HN ]
Re:Coding Flaw Exposes Voter Details for 6.5M Israelis by bsaul on Wednesday February 12, 2020 @04:02AM (#22307156)
in some cases no particular individual are able to see something's wrong, and only someone with a general overview of the system can see the pb.

in this case, every single individual in the chain ( from backend dev to frontend dev to tester to enduser) are able to see that something's very wrong. Which means none of those people are competent. Not any of them.

[ Parent | on HN ]