Hacker News new | past | comments | ask | show | jobs | submit login

> "I threw the code together in minutes and was too lazy to spend another couple minutes figuring out POST."

So it's not the vendor's problem then. They provide you with two ways to make a request. You have a choice to do it right, you didn't.




The device should not support GET at all for this. It opens up a number of attacks and there’s no good reason to support it.


Who says it was the vendor's problem?


What's your point? Nobody said it was the vendor's problem except you.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: