Latest / Logosofia no Dia a Dia
Are Hidden API Endpoints Leaks or Just Plumbing?
When you open Chrome DevTools and watch the XHR requests fly by, you'll often find dozens of unauthenticated JSON endpoints sitting behind polished frontends. Are these data leaks, intentional public APIs, or just the natural plumbing of modern single-page apps? This episode explores what happens when LLM agents like Claude systematically discover and document undocumented APIs — and why the old assumption that "if it's not documented, it's private" no longer holds. We examine the spectrum from benign public data endpoints to genuine Broken Object Level Authorization vulnerabilities, the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.