[spullara]

This actually looks like a concurrency bug in their request handling code that may have stored the user id and camera id in shared variables, under load the wrong camera id is seen by a user. At least based on the description of what they say happened.

[bhhaskin]

Yeah sounds like an issue with garbage collection/freeing up memory.

[cromka]

These are the kind of security gimmicks that I am terrified I will never fully internalize and, as a result, the code I might be proud of may in fact be a ticking bomb.