News for hackers. Stuff that matters.

A comment on I Hacked into Facebook's Legal Department Admin Panel. Parent comment

Re:I Hacked into Facebook's Legal Department Admin Panel by loa_in_ on Saturday December 12, 2020 @06:03PM (#25402637)
A good example of how security by obscurity can fail. Just because there's no url to an endpoint exposed doesn't mean it shouldn't be hardened
[ Parent | on HN ]
Re:I Hacked into Facebook's Legal Department Admin Panel by judge2020 on Saturday December 12, 2020 @08:19PM (#25403416)
I think they assumed it was already hardened by requiring authentication, but didn't do any testing (or were unaware of this endpoint being a thing in the software they use).
[ Parent | on HN ]