| ▲ | peter_d_sherman 3 hours ago | |
>"the difference is intent." >"but if i (or an agent working on behalf of me) use an API in an obviously unintended way to revoke other people's reservations..." ? | ||
| ▲ | bronson 2 hours ago | parent | next [-] | |
Double negative. An attacker using the API in an "obviously unintended" manner shows intent. | ||
| ▲ | john_strinlai 3 hours ago | parent | prev [-] | |
i am not quite sure what your question is, as you simply quoted me and then put a question mark... i think you are confused that i used "intent" in one context, and "unintended" in a different context, is that right? the first sentence: the difference is the intent of the person who caused the cancellations the second sentence: but if i (or an agent working on behalf of me) abuse an API to do things it was not meant or designed to do, such as cancelling someone else's reservation | ||