Hacker News

Favorites Setup
Comment by ydna404 | original | Lovable apps expose passport details and more than 200K private messages
[−]ydna404 · 2026-11-14 Sat 22:03 UTC · link
> 24,664 websites sent database records from Supabase as soon as they loaded, without requiring a login or any other interaction.

Oh boy, open season on those entry points