Hacker News new | ask | show | jobs
by xmcp123 48 days ago
It actively found the wrong API key, that gave it the access it needed...
1 comments

Still sounds like a basic security issue to me.