How I hacked the StaySafe program, the government Covid-19 tracker of Sri Lanka

Re:How I hacked the StaySafe program, the government Covid-1... by newscracker on Monday November 16, 2020 @11:17AM (#25113423)

Great find through what looks like simple use of developer tools, OP.

Since you, the author, have submitted the post, I’d suggest changing the dashboard screenshot with the names also partially blacked out to avoid exposing people who have used this system. It’s possible that some of those names are rare or unique or the way they’re spelled makes them stand out.

[ Parent | on HN ]

Re:How I hacked the StaySafe program, the government Covid-1... by _vghb on Monday November 16, 2020 @11:43AM (#25113765)

Yes, It's not 100% hacking, but I guess I exploited a vulnerability in their API by creating an administrator account to gain access to their dashboard.

Thanks for the comment, I will change the dashboard picture

[ Parent | on HN ]