Submissions from alexschapiro.com

		Reverse Engineering US Airline's PNR System and Accessing All Reservations (alexschapiro.com)
		116 points by bearsyankees 1 day ago \| past \| 60 comments
		Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files (alexschapiro.com)
		821 points by bearsyankees 17 days ago \| past \| 289 comments
		Low PNR Entropy: I accessed all airline bookings via simple math (alexschapiro.com)
		4 points by bearsyankees 19 days ago \| past \| 1 comment
		I tried to change my flight and accidentally accessed everyone else's (alexschapiro.com)
		3 points by makinandbreakin 25 days ago \| past
		Brute-Forceable Airline Reservation API Left Passenger Records Vulnerable (alexschapiro.com)
		3 points by thunderbong 29 days ago \| past
		Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check (alexschapiro.com)
		6 points by bearsyankees 30 days ago \| past
		I hacked a dating app (and how not to treat a security researcher) (alexschapiro.com)
		570 points by bearsyankees 7 months ago \| past \| 311 comments
		I hacked a dating app (Total account takeover) (alexschapiro.com)
		4 points by bearsyankees 7 months ago \| past
		Hacking a Dating App: Private Chats, Passports and More Exposed (alexschapiro.com)
		2 points by bearsyankees 7 months ago \| past
		Hacking a Dating App: Private Chats, Passports and More Exposed (alexschapiro.com)
		3 points by bearsyankees 8 months ago \| past