Boring prank.

Well this not security. I think they just misconfigured something.

Is it a hard 20min expiration or after 20 min of idle/no use?

We have saleforce at work, and the websites asks for credentials after like 10 min of inactivity. Very frustrating since if you focus on your IDE for 15min then go back to admin panel you need to relogin. So people just developed some extensions that keep the session alive and to also autofill the 2FA. Other wise we loose like 1h of just logininper day.

I don’t know how long this pace will last. I suspect that bugs are reported faster than they are written, so we could in fact be puffing from the a long backlog (and I hope so).

It is going to take a given time then stabilizes then decline. I guess maybe a year or so, until all major flaws and bugs are discovered and addressed. Maybe the rust code would help in this. After that it would either go back to normal, which is most likely or developer get up to speed using right tools.

AI could help accelerate writing fixes for reported bugssmaw as it does for discovering them.