Replying to Avatar Alex Lyon

Except that has nothing to do with the article.

"One of the sources told 404 Media that they were able to push updates to a database of government employment information after studying the website’s architecture and finding the database’s API endpoints."
Avatar
Jay Stratton 10mo ago 💬 1

Cool. Did they detail the exploit, or is this a "trust me bro" situation?

Reply to this note

Please Login to reply.

Discussion

Avatar
Alex Lyon 10mo ago

This was written by a journalist who presumably regurgitated whatever their sources told/showed them, so no. Also sounds like it was still exploitable at least at the time the article was written, so probably wouldn't want to write about how to exploit a live govt site...

Avatar
Derek Ross 10mo ago

Bobby Tables strikes again? 🤓

https://doge.gov/workforce?orgId=7cd300eb-cf3f-47f5-90f1-9e66a8bc8d07

Avatar
Alex Lyon 10mo ago

Little Bobby really gets around