Mastodon Feed
jsonstein@masto.deoan.org ("Jeff Sonstein") wrote:
"Quote 2026-08-10
The API has zero authorisations checks on cancelling other people’s reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you’ve moved from #4 to #3 already.
OpenClaw (running Opus 4.6), hacking an Australian gym-booking website"
h/t @simon