There Is No Server to Audit — GenosDB's First Security Audit, and What It Found

When you audit a normal database application, the first thing you do is ask where the server is. That is where authorization lives: one process, one place that decides who may read and who may write,