TLDR Web Dev · MISCELLANEOUS
HOW I ACCEPTED MYSELF INTO CANADA'S LARGEST AI HACKATHON
Summary from the TLDR Web Dev newsletter
This developer found a vulnerability in the GenAI Genesis 2025 hackathon application website, hosted on Firebase. After realizing the site retrieved and parsed all user application data, they manipulated their application status to "accepted" by directly updating the database. They later discovered an information leakage issue where sensitive reviewer data could be accessed.