How Not to Write an API

by
in code on (#3FD)
While creating an Android App for Criticker, a movie review and recommendation website, this author found some interesting security holes in their API.

Who knew that a LookupPassword function that returned any user's password in plain-text would be a bad idea?

Re: Deeper problem (Score: 4, Interesting)

by mth@pipedot.org on 2014-03-10 15:08 (#CK)

Hmmm... I'm able to moderate my own posts.
Post Comment
Subject
Comment
Captcha
Enter the biggest number of nineteen, 18, 82, twenty eight, ninety four or 76: