undefined | Better HN

0 pointsfc417fc8021mo ago0 comments

> an API that should probably be better secured.

I think the API is secured? The entire premise is that a volunteer creates an account and uploads ADS-B telemetry. Detecting falsified data is a separate matter.

0 comments

darthwalsh1mo ago

Sounds like authentication is working great, but their authorization design may be flawed.

filleduchaos1mo ago

How is it flawed? That is the nature of crowdsourcing.

j / k navigate · click thread line to collapse