The authorization check is there now: request your own user ID and you still get your email back, request someone else’s and you get a public profile. Names are supposed to be public on a platform where you pray alongside other people, so what’s left is what was always meant to be visible.
It still works lmao
No email and some other stuff though… maybe they just removed that from the endpoint?
From the source blog post, which has the update
lmao did they vibe patch it or smth
If sinners go to hell, do you even have to do due diligence? Let us pray for the vulnerability to disappear.