A story I like to tell is early high school, I was (and still am) obsessed with reverse engineering things. The school I went to had a custom LMS similar to how

A story I like to tell is early high school, I was (and still am) obsessed with reverse engineering things. The school I went to had a custom LMS similar to how Canvas is used now. They'd set it up using Drupal with custom content types and a pretty intricate front-end. Knowing just a smidge about Drupal I tried using some of the alternate permalinks it generated, things like "/node/12345". In some contexts I could bypass a lot of the custom stuff and get access to Drupal's default editors which gave me a lot more permissions in terms of viewing/editing. Like a good egg, I wrote up a summary of what I found and emailed the developers. I was even nice enough to reverse engineer a solution to their problem and give them a detailed write up on how it could be fixed. Apparently, this department had absolutely no idea that their email was publicly available. I was friends with our IT guy who greeted me when I came into his office with "Why is my boss asking me who is <my deadname>?".