Okcupid has huge security privilege escalation for all users

https://news.ycombinator.com/item?id=3786197
by carterschonwald • 14 years ago
8 3 14 years ago

If you log into okcupid right now, you can view anyone's 8 most recent conversation threads. The site shouldn't be live right now if they know this is going on.

If you are on the OKC team or you know how to reach one of them, please do so. If not, please make sure that others can see this post.

This is a huge security and privacy breach. That is all.

Related Stories

Loading related stories...

Source preview

news.ycombinator.com