How can this happen? Because security is hard.
In fact, it’s way harder than you or I can even imagine. And to be clear, I’m not trying to make excuses for AOL or any other service. I just want you to understand that security is really, really hard.
Let me review some of what I’ll call the fundamental principles that are at play in a situation like this.