Has anyone taken a look at join.doge.gov?

Soooo many holes. I won’t point them out. But I’ve identified 3 client side checks that can be bypassed to really fuck shit up.

submitted by /u/AardvarksEatAnts
[link] [comments]

from hacking: security in practice https://ift.tt/BuDYfzS