I'd rather they be thorough, and I expect their technical resources are a bit constrained. (Plus, I'm pretty sure the user-facing site is or was built in Ruby, and I have no idea what security best practices are for that.)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
replies: