HTTP desync attacks: request smuggling reborn | Not Hacker News!