You are viewing a single thread.
View all comments 
3 points
No website is invulnerable. Since we know from Reddit’s godawful official app they don’t do development very well, no doubt the website also has vulnerable holes.
2 points
They didn’t access the data through a vulnerability in the code, they phished some employee credentials and access it that way.
2 points
That in itself is a vulnerability. In my company we check for impossible travel, browser variance, etc. Credentials are only one aspect of this.
2 points
*
