"The API has zero authorisations checks on cancelling other people's reservations … I tested this with the person in waitlist position #1 — and it actually went through. So you've moved from #4 to #3 already," it messaged back.

THEY'RE BREAKING OUT OF THE LAB! WHAT'S NEXT MODIFYING FORM INPUTS TO INCLUDE SQL STATEMENTS?!!!?!?

Nonsense hype over a shitty website and an ambiguous prompt for luddites who need their doom scrolling fix.