When "it just works" backfires

from here

Some things aren't supposed to just work. Some things aren't supposed to work at all, like web pages reading content from a different origin. Now, as a software developer, I know bugs happen to everyone, but 4 months and counting for a vulnerability that your users can't mitigate is beyond the pale.