Hacker News Reader

I'm not very surprised. If he told me about it, I would find it quite hard to believe that Google's programmers made such an error too.

It's always the assumptions that get you.

This. A thousand times this. Especially when investigating security issues, assume everything could be vulnerable or broken until proven otherwise.

Even I was shocked when I 1st show this bug..