I hacked the NYC building permit portal

I went down a bit of a rabbit hole when trying to figure out if/when the Brooklyn Mirage would reopen. This happened a little while ago but they only recently patched the vulnerability (meaning I can finally share it). TLDR; I figured out how to get access to the plans for every single building in NYC. With Patriot Day (9/11 remembrance) coming up, thought I'd share this. Felt really good to discover & report this, preventing building plans getting into the hands of the wrong people. Full write up and a YouTube video walk through of the exploit on my blog :) submitted by /u/MrBleuPotato [link] [comments]

from hacking: security in practice https://ift.tt/Dmo9EV4