Comment by mkj

Does responsible disclosure really make sense for design flaws like this? Any motivated attacker would have already noticed it too you'd think.