I can confirm that no advanced hacking techniques were used, and anyone with a moderate understanding of how the web works will be able to reproduce the results.

The initial idea behind the analysis was to start with the most basic setup and then move on to more sophisticated attacks. We never reached that second part, as so much sensitive data was already out in the open.

Some don't even need to be hacked. The person just thought they didn't need a login and left everything open.

The bar being vastly lowered is the qualitative difference that some in the pro-AI crowd don't seem to appreciate. At their root, many of the issues we currently see with AI are really cultural/procedural issues that have existed in the industry for a long time, but AI has dumped napalm on the dumpster fire and the neighborhood is now catching fire.