Skip to content
onsuggest
Log in
Article en

Taimi: Finding Everyone's Private Photos Was Easy, But So Was Getting Paid

Source: bobdahacker blog ·

How I found critical IDOR vulnerabilities in Taimi that exposed "expiring" videos, private photos through a bizarre location feature, and allowed fake system messages - and how they actually handled it right with a $10k bounty.

Keyboard shortcuts

Previous discovery
←P
Next discovery
→N
Like
L
Not for me
X
Save
S
Show this help
?
Close
Esc

Shortcuts work on the discovery page.