TLDR Web Dev · MISCELLANEOUS

HOW I ACCEPTED MYSELF INTO CANADA'S LARGEST AI HACKATHON

fastcall.dev5 min read

Summary from the TLDR Web Dev newsletter

This developer found a vulnerability in the GenAI Genesis 2025 hackathon application website, hosted on Firebase. After realizing the site retrieved and parsed all user application data, they manipulated their application status to "accepted" by directly updating the database. They later discovered an information leakage issue where sensitive reviewer data could be accessed.