Post

Tom MacWright
@macwright.com

my favorite bogus security report goes like "your application does X. and mind you, it does it correctly. but if it _didn't_ do it correctly, that'd be a security problem!"

0 reposts17 likes

Marc Tobias
@mtmthemovie.bsky.social

I roll my eyes on security scenarios where users ignore the text and "accidentally" click on well labeled action buttons (sometimes including confirmation) like deleting their account or confirming an email change. "but that means now the account is is owned by $new_email !!1!". Yes, yes, it does...