Recent discoveries on the acquisition of the highest levels of human performance
Summary
An in-depth narrative describing a reverse-engineering exploration of Lyft's bike-share unlock flow. The piece covers intercepting iOS app traffic, SSL interception via a proxy, identifying an unlock/rent endpoint, and a brute-force approach to testing bike IDs, followed by responsible disclosure through HackerOne and reflections on geofence bypass and security implications.