10th August 2026
The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already.
— OpenClaw (running Opus 4.6), hacking an Australian gym-booking website
Recent articles
- Some thoughts on the Navier–Stokes Millennium Prize Problem - 8th September 2026
- The Pelican comparison grid for Astra is pretty interesting - 4th September 2026
- OpenAI's rogue agents were caught communicating via public wikis - 4th September 2026