<<< Baemail security upgrade: done >>> Please log out and …
<<< Baemail security upgrade: done >>>
Please log out and log back in again to ensure you can still access your inbox. Any trouble - give me a shout.
Will be implementing some of the users' feature requests very soon, nearly there.
Replies
Details on the upgrade:
Essentially there was a sneaky way to view other people's inbox if you knew how the back end worked. No breaches were reported, preventative measure only.
Now each req uses mb token to validate user before returning any baemails.