Alex Schapiro
alexschapiro.com
Actively hiring
Cybersecurity
Information Security
Penetration Testing
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw
Update: This post received some attention on Hacker News - see the discussion thread.
Read more
Report
How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw
View the full GraphQL query
Read more
Report
How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files
Update: This post received a large amount of attention on Hacker News - see the discussion thread.
Read more
Report
How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files
Update: This post received a large amount of attention on Hacker News - see the discussion thread.
Read more
Report
Brute-Forceable Airline Reservation API Left Millions of Passenger Records Vulnerable
Timeline & Responsible Disclosure
Read more
Report
Brute-Forceable Airline Reservation API Left Millions of Passenger Records Vulnerable
Timeline & Responsible Disclosure
Read more
Report
How Broken OTPs and Open Endpoints Turned a Dating App Into a Stalker's Playground
Update: This post received a large amount of attention on Hacker News - see the discussion thread.
Read more
Report
How Broken OTPs and Open Endpoints Turned a Dating App Into a Stalker's Playground
Update: This post received a large amount of attention on Hacker News - see the discussion thread.
Read more
Report