No Rules, No Locks: Firebase Misconfiguration and the Borrowers It Left Behind

«Firebase security rules are opt-in. The default, for every new database & storage bucket, is wide open. This is the writeup of a vulnerability started by a team that built an entire lending platform on Firebase, left...»