We wanted to use Baseten for inference, we got admin access to their GitHubstrix.ai·9 pts·bearsyankees·0
A Blackstone real estate company exposed SSN digits, DOBs, addresses and morealexschapiro.com·123 pts·bearsyankees·56
Securing a DoD contractor: Finding a multi-tenant authorization vulnerabilitystrix.ai·221 pts·bearsyankees·101
We love open source: finding a critical auth bypass in etcd (CVE-2026-33413)strix.ai·4 pts·bearsyankees·0
First Impressions on Open-Source Claude Security (Strix)theartificialq.github.io·8 pts·bearsyankees·1
Reverse Engineering US Airline's PNR System and Accessing All Reservationsalexschapiro.com·134 pts·bearsyankees·63
Reverse engineering a $1B Legal AI tool exposed 100k+ confidential filesalexschapiro.com·821 pts·bearsyankees·288
Low PNR Entropy: I accessed all airline bookings via simple mathalexschapiro.com·4 pts·bearsyankees·1
Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Checkalexschapiro.com·6 pts·bearsyankees·0
Nobel Peace Prize Sparks Insider Trading Questions on Prediction Sitesforbes.com·3 pts·bearsyankees·3