Top all-time · #15957
Alex Schapiro
Personal blog · alexschapiro.comsecurityprogramming
Alex Schapiro's personal blog at alexschapiro.com covers security and programming. Since 2025, 4 different Hacker News readers have linked it 12 times, most often “Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check”. It is still writing: the last post was on 2026-08-24, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for its analysis of AI model usage, including the State of AI study on OpenRouter data. One commenter also cites a security vulnerability post from the same blog.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Security research, ethical hacking, and building stuff.
Most-linked posts?
- Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check3 people · 4 mentions · first linked 2025-11-20
- Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files2 people · 2 mentions · first linked 2025-12-03
What Hacker News says?
These are fantastic insights! I work in legaltech space so something to keep in mind is that legal space is very sensitive to data storage and security (apart from this of course: https://alexschapiro.com/security/vulnerability/2025/12/02/f... ). So models hosted in e.g. Azure, or on-prem deployments are more common. I have friends in health space and similar story there. Finance (banking especially) is the same. He…
Comment linking /security/vulnerability/2025/12/02/filevine-api-100k
on “State of AI: An Empirical 100T Token Study with OpenRouter”Submitted Reverse engineering a $1B Legal AI tool exposed 100k+ confidential files as a story · 821 points
HN discussionSubmitted I hacked a dating app (and how not to treat a security researcher) as a story · 570 points
HN discussionSubmitted Reverse Engineering US Airline's PNR System and Accessing All Reservations as a story · 131 points
HN discussionSubmitted A Blackstone real estate company exposed SSN digits, DOBs, addresses and more as a story · 123 points
HN discussionSubmitted Airline Left All Passenger Data Vulnerable Due to Missing Last-Name Check as a story · 6 points
HN discussionSubmitted Low PNR Entropy: I accessed all airline bookings via simple math as a story · 4 points
HN discussionSubmitted I hacked a dating app (Total account takeover) as a story · 4 points
HN discussionSubmitted I tried to change my flight and accidentally accessed everyone else's as a story · 3 points
HN discussionSubmitted Brute-Forceable Airline Reservation API Left Passenger Records Vulnerable as a story · 3 points
HN discussionSubmitted Hacking a Dating App: Private Chats, Passports and More Exposed as a story · 3 points
HN discussionSubmitted Hacking a Dating App: Private Chats, Passports and More Exposed as a story · 2 points
HN discussion