Hacker News Reader

Would you mind posting your finding after you dig more into this stuff?

Sure. But doubt loopholes like these would be openly documented.

Best option seems like if I was still back at school and just asked some international students.