Comments by "Brent Jacobs" (@br3nto) on "Arc Security Allows Access To Anyone's Browser" video.

  1. To be fair this isn’t a SQL directly from browser to the database issue. They could have had any number of layers between the browser request and DB query and still have a bug like this. The problem is using the id given in the request from the browser.
    5