Being easy to fix is completely irrelevant. The thing is that it's easy to avoid. The only way to end up there is to not put any thought into the domain verification scheme before deploying it. Any kind of review would catch it. That's what makes it look really bad.
In general - no, but this kind of fundamental mistake might.
I hope I never work on software you folks use. The grand claims about something that is not even hard to fix is just wild to me.
Being easy to fix is completely irrelevant. The thing is that it's easy to avoid. The only way to end up there is to not put any thought into the domain verification scheme before deploying it. Any kind of review would catch it. That's what makes it look really bad.
1 reply →
If your response to a fundamental design flaw of identy verification is "something that is not even hard to fix" then that hope is mutual.
What about the next 500 easy-to-fix bugs?
Is there a public test suite?
3 replies →