[khomenko]

Next time you think you discovered a gigantic easily exploitable security hole in a mature service that has been around for 10+ years, please think again and research it a lot more before you make a fuss about it. It's possible, of course - but not very damn likely. It's much more likely you are confused. I tried to tell Matt Langley that yesterday on Quora, but he didn't quite buy it, and now he's drinking one big mug of mea culpa. Hopefully this thing will blow over soon, but as a former employee it pains me to see PayPal having to debunk this in social media this morning.