locked.de
When “Access Control” to sensitive Data is just a Number in a URL
Not long ago, I covered the Merkur hack from Lilith Wittmann - a glaring example of careless handling of sensitive data. And today, here we are again! Another service, another broken-by-design system....