4 ms·

What about "My friend tells me that I should also mention that I was able to log in with the emails/passwords leaked."?

• entropyneur 13y ago
  Well, if it's a spam bot that creates Pinterest user accounts then one would obviously be able to log in to those accounts.
  • Uchikoma 13y ago
    Didn't think about that, you're right.
  • amccloud 13y ago
    I think it's used to manage accounts and could be used for spam. The giveaway is the form asking for csrf token and session id; both required for Django to authenticate and accept a POST request.
• deleted 13y ago
  [deleted]