News for hackers. Stuff that matters.

A comment on LocationSmart Leaked Location Data for All Major U.S. Carriers in Real Time. Parent comment

Re:LocationSmart Leaked Location Data for All Major U.S. Car... by gowld on Thursday May 17, 2018 @05:41PM (#17096197)
Theory: Devops disabled the security flag on the JSON API, in order to perform integration tests, then didn't enabled it until reminded.
[ Parent | on HN ]
Re:LocationSmart Leaked Location Data for All Major U.S. Car... by zodPod on Thursday May 17, 2018 @05:53PM (#17096324)
This for sure! My theory has also been that it's possible they literally just needed to add "if (subscriptionApproved) {" to the top. Not exactly a ton of code!
[ Parent | on HN ]