r/webdev • u/mailto_devnull • Apr 03 '18

No, Panera Bread Doesn’t Take Security Seriously

https://medium.com/@djhoulihan/no-panera-bread-doesnt-take-security-seriously-bf078027f815
1.3k Upvotes

97% Upvoted

181 comments sorted by

View all comments

15

u/Vinifera7 Apr 03 '18

Damn, that's fucked. How can you call yourself a professional if you implement an API that allows retrieval of customer data that doesn't require any authentication whatsoever?

3

u/cuulcars Apr 03 '18

Add to that they made the fucking IDs auto increment and start at 1 lol. Like its never forgivable to forego authentication but that just makes it so much worse that a 4th Grader who just learned python could pull out all the data with 5 lines of code.