zlacker

> i discovered that neighbourhood was exposing thousands of users' full legal names through an unprotected API endpoint.

Headline really buries the lede: this is the issue, not some missing ToS boilerplate.

The map is not the territory, the security policy is not the security.

>>ForHac+(OP)
I'm not going to pretend this is an easy read. So I wouldn't blame you if you stopped early. However, there's a section titled "the surveillance infrastructure (orpheus engine)" which claims that children's private information is being distributed to third-parties without consent.

>>Benjam+K
Orpheus engine is publicly available at https://github.com/hackclub/orpheus-engine.