• technocrit@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    11
    ·
    5 hours ago

    “The API has zero authorisations checks on cancelling other people’s reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you’ve moved from #4 to #3 already,” it messaged back.

    Is this a “hack” or just a completely insecure API?

    I’ll you one thing for certain: It’s not “AI”. Doesn’t exist.