Any ruling other than "tough titties" would be fucking insane here. Unsecured API endpoints are public. I was going to say it's like leaving a folder of sensit

Any ruling other than "tough titties" would be fucking insane here. Unsecured API endpoints are public. I was going to say it's like leaving a folder of sensitive info on the train and complaining when someone accesses it, but it's not. You can't program an endpoint by accident. Someone has to specifically go and code it to spit out the data without authentication. It's more like leaving a folder of sensitive information out on the street infront of your office then suing the first person to pick it up. EDIT: Come to think of it. There has to be more to this story. If Grindr was broadcasting exact locations across an unsecure API that'd be extraordinarily unsafe. It would lead to all sorts of black mail and hate crimes. Surely we'd have heard about it if that was the case?