Follow
Ah, the old ID10T...
#CoSoSec
RT @bascule - BitGrail lost $170 million worth of Nano XRB tokens because... the checks for whether you had a sufficient balance to withdraw were only implemented as client-side JavaScript https://t.co/XH5mbIWUno
@SheepOverboard just wow. server authority is important, and I can't imagine building an application or service that would allow the client to do anything without first having the server authorize it.