Netflix still using insecure cookies, and suppressing bug disclosure
arstechnica.com