federate.social
Jonathan Kamens 86 47 (@jik@federate.social)
There's this thing I'm seeing more and more websites doing, where if you were previously logged in and you revisit the site after the login timeout has elapsed, it briefly flashes the logged-in page, including content that should only be visible to you when you're logged in, before logging you out and taking you back to the login page. Wow, what an anti-pattern. If my login has timed out I obviously shouldn't be able to see private data for even a fraction of a second. #infosec 1/2