Submissions from alexschapiro.com

		Reverse Engineering US Airline's PNR System and Accessing All Reservations (alexschapiro.com)
		134 points by bearsyankees 23 days ago \| past \| 63 comments
		Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files (alexschapiro.com)
		821 points by bearsyankees 39 days ago \| past \| 288 comments
		Low PNR Entropy: I accessed all airline bookings via simple math (alexschapiro.com)
		4 points by bearsyankees 41 days ago \| past \| 1 comment
		I tried to change my flight and accidentally accessed everyone else's (alexschapiro.com)
		3 points by makinandbreakin 47 days ago \| past
		Brute-Forceable Airline Reservation API Left Passenger Records Vulnerable (alexschapiro.com)
		3 points by thunderbong 51 days ago \| past
		Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check (alexschapiro.com)
		6 points by bearsyankees 52 days ago \| past
		I hacked a dating app (and how not to treat a security researcher) (alexschapiro.com)
		570 points by bearsyankees 8 months ago \| past \| 311 comments
		I hacked a dating app (Total account takeover) (alexschapiro.com)
		4 points by bearsyankees 8 months ago \| past
		Hacking a Dating App: Private Chats, Passports and More Exposed (alexschapiro.com)
		2 points by bearsyankees 8 months ago \| past
		Hacking a Dating App: Private Chats, Passports and More Exposed (alexschapiro.com)
		3 points by bearsyankees 8 months ago \| past