Securing a DoD contractor: Finding a multi-tenant authorization vulnerability 197 points by bearsyankees 16 hours ago 81 comments story