Hacker News new | ask | show | jobs
by benmmurphy 4677 days ago
it looks like the request goes to the person who posted the photo first. presumably so that person can delete the photo without getting support involved. it looks like the problem was you could control the profile_id so it was different from the profile that owned the photo.