WINNING A HACKATHON, LOSING MY SANITY

Summary from the TLDR Web Dev newsletter

Students created a "Spotify Wrapped" for student dining habits for a hackathon by scraping data from Tufts University's outdated meal plan portal. The project found numerous security flaws in the portal's design, for example, session keys were stored in URL parameters and guest access permissions were easily circumvented.