Posted by shed riot on Jul 22After receiving live analytics requests intended for api2.amplitude.com, I contacted security () amplitude com and was invited to submit the issue through Amplitude's private Bugcrowd programme. In my view, Amplitude's handling of the report, including closing it as "Not applicable" despite evidence of intercepted customer traffic, caused by insecure configurations and documentation, constitutes a negligent approach to...