An API endpoint is just a URL with a value added onto the end that tells the system what you want to get back.
Right, I did some reading and here’s what likely happened with Parler. Lots of crossed wires here.
An API endpoint is just a URL with a value added onto the end that tells the system what you want to get back.
If you had a working URL, it just spat out whatever it had whether you were logged in or not.
I cannot describe how amateur hour this is, if true.
Okay so the admin accounts - they discovered an API endpoint that let them enumerate admin users.
This is also so unbelievably bad that it boggles the mind, from a web dev perspective
The admin accounts were not compromised, apparently, but holy fucking shit you DO NOT expose admin account data EVER. That is asking to get hacked even more.
Happy fucking Monday, let the train wreck of this week begin
More from Internet
Are you an Angular developer?
Check these useful UI and Component libraries for Angular:
🧵👇🏻
1. Material Angular:
UI library for Angular based on Material
2. NG Bootstrap:
UI library for Angular based on the Bootstrap
3. PrimeNG:
Powerful UI component library for Angular
https://t.co/90VmurAdyD
4. Onsen Angular:
Hybrid mobile and PWA UI library for Angular and Onsen
Check these useful UI and Component libraries for Angular:
🧵👇🏻
1. Material Angular:
UI library for Angular based on Material
2. NG Bootstrap:
UI library for Angular based on the Bootstrap
3. PrimeNG:
Powerful UI component library for Angular
https://t.co/90VmurAdyD

4. Onsen Angular:
Hybrid mobile and PWA UI library for Angular and Onsen
Many conversations happening on #WhatsApp (WA) groups about new #WhatsAppPrivacyPolicy .
This thread has arguments to help ditch WA & move to @signalapp:
https://t.co/En4fe9VxUN
Share, use, copy-paste, modify with understanding as you deem fit on any platform in whole or part
1/n
Note: No affiliations, conflict of interest
Info presented with NO bias, prejudice, malice or indemnity.
Open to corrections: individual tweets may be deleted, tweets added to thread or corrected as replies.
Points that are unclear or uncertain are marked with "(?)".
2/n
CONTENT OF WA MESSAGES SHALL REMAIN ENCRYPTED END TO END.
BUT, there's data: contacts, group affiliations, co-affiliations, locations (live?), frequency of contacts, *tags* generated when we send or forward a message or file to contacts or groups, links, clicks on links, etc.
3/n
It is unclear whether this data is anonymized.
NOTHING in latest policy *prevents* the collection, retention, sharing or sale by FaceBook (FB: owner of WA) of this data in part or whole whether with identifying information or anonymized.
Meme source:
https://t.co/nMDTUlb0rl
4/n
Companies need to make money & generate profits:
To create software, install & maintain infrastructure.
Google, FB, Insta, Amazon etc sell data created from our content & data generated from our interactions (searches, clicks, purchases etc).
This makes many uncomfortable.
5/n
This thread has arguments to help ditch WA & move to @signalapp:
https://t.co/En4fe9VxUN
Share, use, copy-paste, modify with understanding as you deem fit on any platform in whole or part
1/n
Note: No affiliations, conflict of interest
Info presented with NO bias, prejudice, malice or indemnity.
Open to corrections: individual tweets may be deleted, tweets added to thread or corrected as replies.
Points that are unclear or uncertain are marked with "(?)".
2/n
CONTENT OF WA MESSAGES SHALL REMAIN ENCRYPTED END TO END.
BUT, there's data: contacts, group affiliations, co-affiliations, locations (live?), frequency of contacts, *tags* generated when we send or forward a message or file to contacts or groups, links, clicks on links, etc.
3/n
It is unclear whether this data is anonymized.
NOTHING in latest policy *prevents* the collection, retention, sharing or sale by FaceBook (FB: owner of WA) of this data in part or whole whether with identifying information or anonymized.
Meme source:
https://t.co/nMDTUlb0rl
4/n

Now that #WhatsApp have updated their terms, forcing users to share their data with #Facebook, here's our suggested update to that notification you see at the top of your chats.#WhatsappNewPolicy #WhatsappPrivacy pic.twitter.com/FjxFGBm6Q8
— Privacy International (@privacyint) January 7, 2021
Companies need to make money & generate profits:
To create software, install & maintain infrastructure.
Google, FB, Insta, Amazon etc sell data created from our content & data generated from our interactions (searches, clicks, purchases etc).
This makes many uncomfortable.
5/n