Articles & Write-ups

• do transport companies trust their clients? (some really shouldn't) i was on a [redacted] train and fell into a rabbithole.

• become an admin... somehow? account takeover and privilege escalation through a broken authentication flow.

• when row level security is optional: a supabase misconfiguration story how missing rls rules and legal oversights turned multiple production apps into open bars.