alexschapiro.com on Hacker News

A Blackstone real estate company exposed SSN digits, DOBs, addresses and more(alexschapiro.com)

100 points by bearsyankees 2 months ago | 44 comments

Reverse Engineering US Airline's PNR System and Accessing All Reservations(alexschapiro.com)

108 points by bearsyankees 10 months ago | 51 comments

Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files(alexschapiro.com)

752 points by bearsyankees 10 months ago | 258 comments

A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.

I hacked a dating app (and how not to treat a security researcher)(alexschapiro.com)

442 points by bearsyankees 1 year ago | 265 comments

A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.