Michael on Nostr: ...

https://www.troyhunt.com/how-spoutibles-leaky-api-spurted-out-a-deluge-of-personal-data/

Oh wow! What a mess! And a good reminder for everyone out there: only ever return the database fields you actually need for any given API response. Never just JSON-encode the whole DB row…