Apart from the technical implementation I'm surprised the writeup didn't catch the flaws in such a setup. The notifyer has no obligation to actually notify correctly. They can spam some advertising site or malicious…
Apart from the technical implementation I'm surprised the writeup didn't catch the flaws in such a setup. The notifyer has no obligation to actually notify correctly. They can spam some advertising site or malicious…