Get the latest tech news
Online group exposes Rabbit R1 massive API security flaw
Researchers have discovered a major Rabbit R1 flaw, allowing anyone to read any R1's responses, and much more.
Update: June 28, 2024 (7:04 AM ET): Rabbit has directed us to a page on its website that’s devoted to these exposed API keys. As part of the rotation process, the team updated relevant portions of the codebase to ensure that all secrets were properly stored,” the company explained. A team of security researchers collectively known as Rabbitude reported that it gained access to Rabbit’s codebase on May 16 and discovered several hardcoded API keys.
Or read this on r/technology
