JBJatin Bangainjatin-banga.hashnode.dev·Feb 28 · 12 min readZomato Privacy Flaw: How the ‘Friend Recommendations’ Feature Enables Location StalkingTL;DR: Zomato’s “Friend Recommendations” API allows unilateral contact syncing. By uploading a phone number, bad actors can extract a user’s restaurant recommendation history and restaurant coordinate00
JBJatin Bangainjatin-banga.hashnode.dev·Feb 28 · 10 min readI Reverse-Engineered Zomato’s Food Rescue Feature — Here’s What I Found InsideZomato’s “Food Rescue” is essentially a race condition. Here’s how I built a headless monitor to win it. Every so often, Zomato throws a pop-up on your screen: a cancelled nearby order offered at 50% 00
