Re: [MINUTES] CCG Atlantic Weekly 2026-01-27

That's a pretty good summary, but it contains an important mistake.

It says,

   - *Confused Deputy Vulnerability:* A widespread issue where a service
   incorrectly uses another party's permissions.

that's backwards.  The definition should be

   - *Confused Deputy Vulnerability:* A widespread issue where a service
   incorrectly uses its own permissions on a resource designated by somebody
   else.


--------------
Alan Karp

>

Received on Wednesday, 28 January 2026 00:15:35 UTC