Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files(alexschapiro.com)
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.