(Security) hole-ier than thou
  • Lena@gregtech.euEnglish
    24·
    2 months ago

    It still works lmao

    No email and some other stuff though… maybe they just removed that from the endpoint?

      • Kissaki@feddit.orgEnglish
        3·
        2 months ago

        If sinners go to hell, do you even have to do due diligence? Let us pray for the vulnerability to disappear.

    • Kissaki@feddit.orgEnglish
      4·
      2 months ago

      From the source blog post, which has the update

      The authorization check is there now: request your own user ID and you still get your email back, request someone else’s and you get a public profile. Names are supposed to be public on a platform where you pray alongside other people, so what’s left is what was always meant to be visible.