Never on a Friday

I like Okta. It can get a bit pricey but it’s not bad.

But if you’re going to start making it a habit of doing vulnerability notifications late on Friday evenings? I’m going to take ten mins on a Saturday to call it out.

It’s a bit of an edge case, login bypass for any usernames with 52+ characters. But don’t be sneaky about notifications. That furrows the brow more than the vulnerability.