 So the other day I log into this website. It's a company that I'm somewhat familiar with. I'm not going to say who it is at this point. And it's a website that's primarily geared towards family and kids and they have a bunch of stories that audio stories you can download and videos and stuff for your kids. Actually you can't, you can stream them on the website. And normally, you know, they charge for it but they have a 28 day free trial and I tried that out. They didn't ask for a credit card and I just gave them my junk email account and I was able to get in. So of course I go there and I go to the audio section and I want to be able to download these audio files so I can listen to them in the car with my kids. And as I said, they allow streaming on the website but they don't have a download link so of course they open up the developer console in my Brave browser and I look at the network stuff. I try to load the audio file. And yeah, I was able to get, you know, they had both MP4s and AUG files or M4As. I actually think they work for the audio files anyway. That's not the issue. The issue is the second I open up the console and I scroll down on the page, comments started loading. So this, on this website, you can listen to these audio stories and then the kids can post comments and talk back and forth. Not a big deal, you know, they have these little cartoon avatars. They don't, you know, look at the kids and they have their screen name but not their real names except in the console when it passes the comment information. Right before, before I even found the MP3 or AUG files that I was looking for, I saw something that said comments, user data and a JSON format. When I click on that, it listed all the user comments that loaded. It had all their user information. I mean all their user information. It listed their real first and last name, their email address, their birth date, the, when they created their account, last time they logged in, their account number, which I don't even know what if there's anything I could do with that. What else, there were a few other things but the big thing is like I said, this is a website for kids. It also listed whether they were marked as a parent or a child. I'm talking, anybody can log into this site and get someone's birth date, first, last name and email address. So of course, you know, never would I let my kids, you know, conversate on a website like that to begin with but that is really, really bad for a website geared towards kids. I'm talking something like, and that's again, one of the main reasons I'm not going to say the company's name because I don't want predators going over there and trying to contact these kids. But like I said, when they created their account, the date they created their account, last time they logged in, their birth date, first name, last name, email address and that's just, now again, that's not displaying on the page but it's being passed from the server to my browser and the browser's sifting through it and displaying the proper information on the page but anybody, it's still coming to my web browser even though it's not displaying on the page. So of course, I email the company. Obviously this is a mistake. Hopefully it wasn't done on purpose. So I emailed them. This is probably two or three days ago and I got a response back yesterday. Of course, it's one of those. They're going to forward it to their IT department. So hopefully they do and hopefully, I mean, this is just something that literally they just need to go into their server side script and change what is sent from the server. It should be a very simple fix. So hopefully it gets fixed soon. The email, I get back from them. Again, this email is not from their IT department. It's from someone at the customer service saying they're going to forward it to the IT department. They're like, try logging out and logging back in and see if you still see the information. Again, they said they're forwarding it to the IT department and that's what's important and hopefully this company takes care of this quickly. Normally if a company doesn't take care of something like this, I would let you guys know what website it is but because of, you know, who is on this site, I don't even want to do that. But of course, I do, you know, I log out and log back in even though this is a completely server side issue my browser has should have nothing to do with what's being transferred from the server but just to make sure maybe they made a change and me logging out and logging back in it shouldn't make it up because it's all server side. But yeah, so this is just a message to say be careful what you let your kids do online and again my kids haven't even seen the site. My plan was to get the 28 day free trial, grab the files we want to listen to and listen to them. So hopefully they take care of this and yeah any site you go to that has private information you should be looking quickly at least open up your developers console see what information and just search for things you might think that are private your username your first name your last name stuff that shouldn't be displaying on the website and see if it comes up and and of course if you're logging in as you it's okay for that information is being passed to you of your information but search for your information and you might find other user information next to it if they're sending incorrectly wherever you are check what's being sent from a website and to a website or any application and whenever you're on a network you know unfortunately legally you there are certain scans and stuff you're not supposed to do on networks which won't make it vulnerable to you because whenever I get on network I scan I see what other computers on there and what ports are open stuff like that to see if anything's monitoring stuff it shouldn't that's illegal in a lot of places and it shouldn't be but those are laws made up by people who don't understand computers if I'm on a network I should be able to scan that network all I want if you don't want me scan your network you shouldn't let me on your network simple as that and saying you can't scan a network is like saying oh when you walk through our building don't look at what doors are open and closed I mean trying to kick down the door is a little different I'm trying to break into a server or another computer that's different but to just look at and see what computers are there and what's going on with them it's no different than walking through a building and looking at what doors and seeing which ones are wide open and which ones are closed again going up and trying to kick open a door is a little different if we just treated the computer world like we do the real world things would be so much better the problem is people who make the laws and the rules usually have no clue what they're talking about and they have no way to correlate it with the real life scenario so that's it thank you for watching and if I hear any updates I'll I'll let you know and if this website fixes it you know good great you know you like yay they did it and and that's it thanks for watching I hope you have a great day