Authentication bypass on Uber’s Single Sign-On via subdomain takeover | Hacker News Reader