So much security through obscurity, or worse the dev doesn’t know how to do it properly and doesn’t have time to learn it. So many completely open blob storage buckets allowing full read write, cors * * *, I’ll roll my own authentication, database with plain passwords. “No one should be able to get to there anyway”
So much security through obscurity, or worse the dev doesn’t know how to do it properly and doesn’t have time to learn it. So many completely open blob storage buckets allowing full read write, cors * * *, I’ll roll my own authentication, database with plain passwords. “No one should be able to get to there anyway”
Boss wouldn’t even listen to using a nonce per call because the caller and target used different databases. Same back end, just different databases.