Years ago, I worked at a hosting company called Brightbox. Being a hosting company and being responsible for their customer's data meant that security was a high priority for them. One day, we were discussing some new feature and the CTO, John, pointed out a security flaw in
