Critical vulnerability in AI coding platform Base44 allowing unauthorized access

"The vulnerability we discovered was remarkably simple to exploit - by providing only a non-secret app_id value to undocumented registration and email verification endpoints." So you could sign yourself up as editor / collaborator on any app once you knew the app's ID.

Jeez, that's sloppy. My colleague in 2000 discovered you could browse any account on his bank's website by just changing the (sequential!) account IDs in the URL. In a lot of ways we've made great strides in security over the last 25 years... and in many ways, we haven't.

Have we really made "progress" ? Even in 2000 I doubt people were allowed to walk into a bank and look at everyone's account details.

...How long did it take a transfer to settle in the 2000s