Hacker News Reader

> i discovered that neighbourhood was exposing thousands of users' full legal names through an unprotected API endpoint.

Headline really buries the lede: this is the issue, not some missing ToS boilerplate.

The map is not the territory, the security policy is not the security.

View on HN

I'm not going to pretend this is an easy read. So I wouldn't blame you if you stopped early. However, there's a section titled "the surveillance infrastructure (orpheus engine)" which claims that children's private information is being distributed to third-parties without consent.

Orpheus engine is publicly available at https://github.com/hackclub/orpheus-engine.

Reply on news.ycombinator.com