Six hours after launch, my dashboard showed one endpoint handing out every…Watch on Instagram
Lonely developerInstagram

Six hours after launch, my dashboard showed one endpoint handing out every…

1:03English(auto-generated)5 segments141 words, 1 min read

Search inside any video

SavedThat transcribes your saved videos and lets you search across all of them instantly. Save this video and find any moment.

TL;DR

In this video, the developer discusses a security oversight in their application that allows user data to be downloaded, and how to mitigate such vulnerabilities.

user data securityapplication vulnerabilitiesCloudflare bug huntingopen-source security toolsendpoint protectiondata breach preventionsoftware security best practicesapplication mapping tools

Chapters

  1. 0:00Security Breach Discussion
    01
  2. 0:10Endpoint Vulnerability Identified
    02
  3. 0:20Cloudflare's Open-Source Tool
    03
  4. 0:30Mapping the Application
    04
  5. 0:40Confirmed Vulnerabilities
    05
  6. 0:50Patching the Issues
    06
  7. 1:00Running Security Checks
    07

Transcript

0:00

Claude, someone's downloading every user we have! Every user? Emails, phone numbers, all of it! We've been live six hours! The user's endpoint doesn't check who's asking. You wrote the user's endpoint! You said just make it work. It works really well.

0:14

Lock it down and find whatever else you missed! I'm not great at checking my own homework. But Cloudflare just open-sourced the skill that started their own bug hunting system. Free! Clabflare, for free.

0:30

MIT license, one line to install. What does it do? Maps the app, sends hunters after every input. Then a different agent tries to prove each finding wrong. And? Four confirmed, including the one that's live right now.

0:45

Patch that first! Done! Want me to run it again? Why again? Their own notes say one run finds about half. Run it before every launch.

0:57

Run it before every launch.

Are you the creator or rights holder of this video? Request removal of this transcript.

Related Transcripts

My full app launch checklist 👇 1.1:06Instagram

My full app launch checklist 👇 1.

Chris Raroque

94% of my week was Claude re-reading chats it already had.0:47Instagram

94% of my week was Claude re-reading chats it already had.

Stiles AI

Hermes Agent is insane… 100,000+ github stars32:47YouTube

Hermes Agent is insane… 100,000+ github stars

Comment „list“ for the full repo🔥 #softwareengineering #computerscience #dev0:44Instagram

Comment „list“ for the full repo🔥 #softwareengineering #computerscience #dev

Mohamad Al Sayed

Dear Higgsfield, I reverse engineered you in 12 hours21:44YouTube

Dear Higgsfield, I reverse engineered you in 12 hours

Sirio

Comment "MANUS" to get this New OpenClaw Like AI Agent that runs locally on your machine.0:26Instagram

Comment "MANUS" to get this New OpenClaw Like AI Agent that runs locally on your machine.

Lex Fridman

Never lose a moment again

Save videos from YouTube, Instagram, and TikTok. Search everything that was said, and jump to the second.

Start Saving Videos - Free Trial