Ever found an api with sensitive data that had no authentication whatsoever?
Yeah I did I will write about it... somewhen down the line
More content, see here