Boost (Mastodon): how an interns attempts to familiarize themselves with a codebase, and spice up the comments resulting in finding a major security vulnerability. Via Reddit, via 🤷‍♀️ — masukomi (@masukomi@connectified.com)

listen, there's a LOT of text here and even if i did have easy access to OCR it wouldn't fit in the description.

TL;DR. An intern starts spelunking the the codebase and making shitpost comments like the following.

This function is older than me and probably pays taxes.

TODO: Ask if this while loop has health insurance.

Here lies Sara's hopes and dreams (2019-2022), killed by this recursive call

in the end they stumbled across a major authorization vulnerability and filed a jira ticket with the title "Auth be acting mad sus RN no cap FRFR (critical security issue)" The intern was correct.

and they had to explain to the CEO why "no cap FRFR" appears in their security audit.

A fun intersection of humor, documentation, and security — — masukomi (@masukomi@connectified.com)