API Security

An Australian Gym Booking System Just Got Broken by AI — And the API Security Problem Nobody's

Developer Simon Willison revealed: an Australian gym booking site's cancellation API has zero auth checks, letting AI tools bump you off a waitlist. N