SoShabby GoDaddy flings patch at domain hijack hole

Domain goliaths GoDaddy has rushed to plug a vulnerability that allowed attackers to hijack registered sites. Pen tester Dylan Saccomanni dropped the Cross-Site Request Forgery (CSRF) bug on his blog after the company said there was no timeline for a fix. GoDaddy applied a fix less than 24 hours after the blog was published …

[Bronek Kozicki]

This sums it up

"the company said there was no timeline for a fix."

Yup, heard that before

[Will Godfrey]

Puzzled

I know somebody has to be at the bottom of the pile, but how has GoDaddy managed to survive being there for just about its entire existance?