ICSI in Forbes

It's Past Time To Pay Much More Attention To API Security
December 5, 2018 | Taylor Armerding, Forbes

Nicholas Weaver, researcher at the International Computer Science Institute and lecturer at University of California, Berkeley, told Krebs that implementing access controls is “not even Information Security 101, this is Information Security 1,” and that the failure of the USPS and others to do so was “catastrophically bad.”