No one likes a leaky API: security requires a combination of technology & processes

Not long ago, Peloton — the well-known manufacturer of high-end exercise equipment — experienced an unfortunate incident where a long-lasting security vulnerability in Peloton’s API made private user data public. Everything from a rider’s name, age, gender, and location to