HACKING 700 MILLION ELECTRONIC ARTS ACCOUNTS

Summary from the TLDR Web Dev newsletter

This developer found a vulnerability in EA's authentication system that allowed him to manipulate user accounts. The vulnerability involved exploiting exposed API documentation and a single insecure endpoint. It allowed him to steal usernames and game data, ban accounts, and even bypass game bans. The vulnerability was eventually patched by EA. The scenario highlights the need for more bug bounty programs for popular software.