A Pentester Took Apart a Website's Code to Prove It Was Totally Pointless | HackerNoon
Briefly

The casino's request-response system relied heavily on a signature that was generated client-side, which ultimately made it vulnerable to reverse-engineering and exploitation.
Despite the developers' intentions for security, the client-side nature of the signature enabled me to automatically replicate requests through programming, demonstrating the flaws in their design.
Read at Hackernoon
[
|
]