Leaking close friends via BeReal API (shomil.me)

This was a nice writeup. Thanks for sharing!

All of these things are kinda a necessary consequence of the way the app works.

It's a social network... You should consider everything you do on it to be public...