“It’s just a small endpoint.”
“It’s just a debug flag.”
“It’s just internal.”
That word — just — is how things get in.
An attacker doesn’t care how small it is.
Only that it’s open.
Treat the tiny doors
like the big ones.
The breach won’t care which you ignored.
– Serguey Asael Shinder
Leave a comment