If you think about this situation as a funnel, the number of apps that are vulnerable to this particular security issue is probably 0. But is it a security issue? Yes.

The ratio of "amount of required effort" (which includes risk of messing up the release) vs "actual impact on the world" is extremely off. "Why do I have to do all this effort / paperwork for something as minor as this?" is what I say to myself.

3
Share
Share on Mastodon
Share on Twitter
Share on Facebook
Share on Linkedin
Replies