21 votes

Hacking Grindr accounts with copy and paste

2 comments

  1. [3]
    Comment deleted by author
    Link
    1. [2]
      skybrian
      (edited )
      Link Parent
      I agree that code review would help. I’m not certain that I would have avoided this mistake, nor am I certain that I would have caught it in code review. It’s easy to think that you would, but...

      I agree that code review would help. I’m not certain that I would have avoided this mistake, nor am I certain that I would have caught it in code review. It’s easy to think that you would, but sometimes you’re having a bad day and aren’t as thorough a reviewer as you should have been.

      It seems to me that experience with programming and observation of the mistakes people make all the time should teach humility when it comes to how susceptible we are to making logic errors? Most mistakes are all too believable.

      6 votes
      1. [2]
        Comment deleted by author
        Link Parent
        1. skybrian
          Link Parent
          Yes, better processes would likely have caught this, like security reviews and penetration testing.

          Yes, better processes would likely have caught this, like security reviews and penetration testing.

          1 vote