Remember some years ago now all the (justifiable) furore around how long you could connect a vulnerable Windows PC to the net for before it got hacked / infected? The statistic ended up being 20 minutes, i.e not long at all.
I’ve not seen any similar research (at least as widely publicised) for popular web apps, [...]
