Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
klik1
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
klik1
8y ago
the gist of the vulnerability was an expectation that nobody would ever find their origins if they had some crazy hostname: "asuhdfo8a7ys8dfas.website.com" type of setup. In front of this origin they had a server that did auth and
2.
▲
by
klik1
8y ago
Posting under an alternative account for obvious reasons. Bad API's used in IoT are a huge vector for attack and too few companies in the mobile first world have a bug bounty program. I found a similar problem with an API for an app th