undefined | Better HN

0 points6d0debc07112y ago0 comments

Would've been fairly easy to request the ID at the start and refuse to perform the operation if you didn't have a valid one. Heck, that seems the obvious way to do it - less to execute if they fail the ID check.

0 comments

1 comments · 1 top-level

jbrooksuk12y ago

True. There is definitely more Microsoft can do to resolve this, your solution being the easiest way to implement decent security.

j / k navigate · click thread line to collapse