News for hackers. Stuff that matters.
Re:Show HN: A website chatbot that also uses APIs by quickthrower2 on Tuesday August 15, 2023 @12:58AM (#37130362)
You need to say more about how you make this secure. If I can get my airline booking details, can I get someone elses?
Re:Show HN: A website chatbot that also uses APIs by iamrafal on Tuesday August 15, 2023 @03:02AM (#37131059)
yes, most airlines will let you retrieve your or someone else’s booking details by just knowing the PNR and name

but you’re correct, security is an important matter to manage. That’s why I’ll be adding user authentication in chat.