3 ms·
It's really surprisingly to me that a user could take their access token and request a deletion of a resource that they do not have authorization to delete...an
by BinaryIdiot 12y ago
It's really surprisingly to me that a user could take their access token and request a deletion of a resource that they do not have authorization to delete...and it deletes it. I wonder if they have anymore authorization issues like this.
- fakeempire 12y agoI'm struggling to not sound rude, but that's the whole point of the submission. He was surprised, you're surprised, I'm surprised, everyone here is surprised. Facebook was so surprised that they gave him money.