4 ms·
You could detect that enumeration and would require a list of everyones name - maybe add a DOB and a price per API call and it'd go down.
by eddsh1994 4y ago
You could detect that enumeration and would require a list of everyones name - maybe add a DOB and a price per API call and it'd go down.
- orev 4y agoEnumeration doesn’t have to mean using a brute force search. One could simply make the api call and then update a local database with the result. That local database would then become the potentially exposed data.