Jimmy Miller
👤 PersonAppearances Over Time
Podcast Appearances
And I just got so annoyed with having to spend like 15 minutes logging into this system that I was like, I'm going to write a program. It's going to do all this for me. And it's just going to email me my schedule every week. So I go to write the program. And I start, you know, it's a simple little Python program making some HTTP requests.
And I just got so annoyed with having to spend like 15 minutes logging into this system that I was like, I'm going to write a program. It's going to do all this for me. And it's just going to email me my schedule every week. So I go to write the program. And I start, you know, it's a simple little Python program making some HTTP requests.
And I was like, all right, let me figure out if I don't send a password, like what error I get. And then I can, you know, continue on from there. I got the schedule. I didn't send in a password, username or password and just got the schedule. And I was like, that's a little weird. Did I somehow like, I don't have cookies set. There's no way that it knows my credentials.
And I was like, all right, let me figure out if I don't send a password, like what error I get. And then I can, you know, continue on from there. I got the schedule. I didn't send in a password, username or password and just got the schedule. And I was like, that's a little weird. Did I somehow like, I don't have cookies set. There's no way that it knows my credentials.
So I visited it in the browser and I was like, Oh, actually that, that inner eye frame there. doesn't require auth at all. And it's a schedule, though, is what I thought. It doesn't really matter. It's just like someone's schedule.
So I visited it in the browser and I was like, Oh, actually that, that inner eye frame there. doesn't require auth at all. And it's a schedule, though, is what I thought. It doesn't really matter. It's just like someone's schedule.
So I push the back button on the browser, or I click the back button in the app, and it takes me back to another page with my social security number and my bank account information. And I realize every single employee's social security number and bank account information is just on the web, unauthenticated. And all you need is this employee ID, a sequential number to find them.
So I push the back button on the browser, or I click the back button in the app, and it takes me back to another page with my social security number and my bank account information. And I realize every single employee's social security number and bank account information is just on the web, unauthenticated. And all you need is this employee ID, a sequential number to find them.
So I try to reach out to the company to tell them, you know, like, hey, this is a problem. Because I knew like my local branch is not going to know anything about this. I try to like reach out to corporate. I like filled out an employee survey and stuff. And they respond back to me. This is a customer support person. My older brother told me, well, you can't give it to them for free.
So I try to reach out to the company to tell them, you know, like, hey, this is a problem. Because I knew like my local branch is not going to know anything about this. I try to like reach out to corporate. I like filled out an employee survey and stuff. And they respond back to me. This is a customer support person. My older brother told me, well, you can't give it to them for free.
Like you can't tell them the security vulnerability for free. Like they should pay you for this. Okay. Me being the dumb 16 year old I was. Dubious advice. I was like, well, you know, you'll have to pay me. Didn't hear back for several months.
Like you can't tell them the security vulnerability for free. Like they should pay you for this. Okay. Me being the dumb 16 year old I was. Dubious advice. I was like, well, you know, you'll have to pay me. Didn't hear back for several months.
All of a sudden at 6 a.m. I hear a bang on my door. I sleep like on the second story, but like my room kind of goes straight down the stairs to the door. So I'm like the closest to the door of my family. And I hear this like really loud bang on the door at 6 a.m. I go downstairs and I hear police open the door. Like it was like that, like pitch.
All of a sudden at 6 a.m. I hear a bang on my door. I sleep like on the second story, but like my room kind of goes straight down the stairs to the door. So I'm like the closest to the door of my family. And I hear this like really loud bang on the door at 6 a.m. I go downstairs and I hear police open the door. Like it was like that, like pitch.
And I look outside and there's no police cars, nothing, not a single one that I can see. Cause like we have a big window and I look out, there's nothing out there. And there had been a break-in in a house not too far from us a week prior. And I'm just like, this does not sit right to me. I was like, how do I know it's the police? And the guy responded very confused.
And I look outside and there's no police cars, nothing, not a single one that I can see. Cause like we have a big window and I look out, there's nothing out there. And there had been a break-in in a house not too far from us a week prior. And I'm just like, this does not sit right to me. I was like, how do I know it's the police? And the guy responded very confused.
And he goes, well, we're busting in the door. I back up, battering Ram into my door immediately. Throws me on the ground, puts me in handcuffs. And in walks Secret Service agents.
And he goes, well, we're busting in the door. I back up, battering Ram into my door immediately. Throws me on the ground, puts me in handcuffs. And in walks Secret Service agents.
the wildest thing i have a i i don't know if i sure still have the picture but they like left a big huge mark in the front door they had the battering ram ready they didn't even wait very long they just came busting in came busting in uh and so i asked the first secret service agent that is coming in like can i know what this is about as i'm on the ground in handcuffs and he
the wildest thing i have a i i don't know if i sure still have the picture but they like left a big huge mark in the front door they had the battering ram ready they didn't even wait very long they just came busting in came busting in uh and so i asked the first secret service agent that is coming in like can i know what this is about as i'm on the ground in handcuffs and he