Wow, #Screencastify is in full damage control mode. Very disappointing.

They released an update today, two days after my blog post, finally restricting the attack surface to five subdomains. And they released a blog post on the topic. But don’t tell people that about the fix today. Instead, they claim to have fixed the issue back in February. And talk about “a series of hypothetical steps” instead of admitting that there was/is an issue.