Claim

insecure direct object reference DISCOVERED_BY Chris Monteiro

Chris discovered the access-control flaw while inspecting Besa Mafia message URLs.

Episode: EP 156 — Kill List
Origin: Derived
Confidence: 98% (extractor score, not a fact score)
Speaker: Chris Monteiro
Attributed source: —

Transcript evidence

“I looked at my order for taking out Bob the Builder, and I looked at the address bar, and I saw that there was an ID in the address bar.”

Chris Monteiro · offsets 12801–12937

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:36:37.923844+00:00

claim:ep156:6d28ac577d93