"We are gathered here today because your thoughts and prayers did not secure our app"
post
Why does it need any personal details at all??
The Catholic Church is known for a lot of things. Keeping up with the times (or cyber security) isn't one of them.
Vatican Programmer: Oh, mighty Lord, sitting in the Sky, show me the way to this bug I seek and eliminate ineffectiveness. Amen.
Still better than vibe coding
So uh.. what does a prayer app even do?
It connects users across the globe to pray for the Holy Father’s intentions, and as of July 2026, it has 719,517 registered accounts
The only two screenshots they have on GPlay feature prayer scheduling and sharing your prayer.
See, humans are smart. Praying and blessing things yourself? By hand, so to speak? Boooo! Pedestrian! Ain't nobody got time fo dat!
the Tibetans believe the prayers and mantras will be blown by the wind to spread the good will and compassion into all pervading space. Therefore, prayer flags are thought to bring benefit to all.
By hanging flags in high places the Lung ta will carry the blessings depicted on the flags to all beings. As wind passes over the surface of the flags, which are sensitive to the slightest movement of the wind, the air is purified and sanctified by the mantras.
I choose to believe that the prayer app is just a hip, new and with it innovation in prayer spreading.

It still works lmao
No email and some other stuff though.... maybe they just removed that from the endpoint?
Misread it as
Pope's official prayer app, "Cardinal Sin"...
Why not just give the app away and let people access the content without having them sign up? Oh right.... The people are the product.
a pope app? perfect for indulgence micro transactions
Is JD Vance in here? He's supposed to be Catholic right?
Alcoholic, not Catholic!
To borrow a tenet from another abrahamic religion, trust in God, but tie up your camel.
Why should they care about security user data? We’re all equal before God.
I’ve seen so many stories about leaks that I skip most of them. I’m glad I didn’t skip this one.
Turns out the biggest miracle wasn’t multiplying loaves, it was making authentication disappear. An IDOR this basic on an app handling personal data is embarrassing. 🙈
all 44 comments