Tag: #multi-tenant
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 1 posts
Authentication, Authorization, and IDOR — Why the Login Is Fine but You Can See Data That Belongs to Someone Else
Most real data breaches come from authorization, not authentication. The classic case is IDOR, where the login passes normally but changing only the ID in the URL returns another user resource verbatim. This post separat
2026-07-26 · 15 min read #security#authorization#idor#api#multi-tenant