Post

What upsets me the most is that session injection isn't some obscure technique. It was common in the forum days 20 years ago. And devs learned to write forum software to safeguard against it. But modern app companies seem to be completely unaware of any of the security lessons we learned back then.

it's like...laughable how many folks are failing this basic internet security test. We thought it was our parents falling for the scams when it was our friends all along