Web Security is Fun!

[wolffyluna]

So, you know how pillowfort.io had some security down time a little while ago? That was roughly when I went from 'ooh, I should buy a key some time' to '...let's wait and see.' Mostly because I'm not a security expert, and I didn't know the details, so I wasn't sure if they were caught out by something weird, or if this was a moonpig level You Should Have Predicted This sorta security issue.

Turns out, it looks like it was the latter!

Which, gee, oof. I mean, yay my instincts, for predicting it'd be this sort of thing-- but oooooof.

Yeah, so definitely not going to pillowfort until they've at least done some more pentests.

Comments

[wolffyluna]

Pillowfort has been making a series of missteps, but this is the biggie for me as well.

Like, I could live with poor moderation, if I didn't have to worry about my email address being leaked. But considering I do... yeah, I'm not paying 5 bucks to have a security vulnerability in my life.