I Built a “Secure” FastAPI App — A Hacker Downloaded Every User’s Private Data by Changing One…

I thought “login required” meant “only you can see your data.” Then I watched a stranger access my medical records. Continue reading on Medium »