3 ms·
They're just querying the API. The data they are examining was meant so the app knows how many people are "in your area" .. but instead of just giving you some
by kjaftaedi 7y ago
They're just querying the API.
The data they are examining was meant so the app knows how many people are "in your area" .. but instead of just giving you some vague information, it's giving you the exact coordinates of other users, and identifying info about them.
- rossdavidh 7y agoReally, one could argue it's not even "leaking" data about other users, it's just delivering that data to you per your request. "Leak" kind of implies at least disclosing info about other users was not your intention, whereas this seems more like "Delivering".
- hn_throwaway_99 7y ago> "Leak" kind of implies at least disclosing info about other users was not your intention That's the whole point - it's not uncommon for (very) junior programmers to not understand the difference between client and server-side validation. This is absolutely a leak.