I Could Unlock My Airbnb From Anywhere in the World
The smart lock on my Airbnb had a geofencing feature to prevent remote access. It only worked in CSS.
Responsible Disclosure
How I Got Free Access to MarineTraffic's Paid API as a Student
I found an endpoint that returned paid-tier ship tracking data without checking subscription level. A CS student, a curious HTTP request, and a conversation with their Head of Engineering.