I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID
BobDaHacker
20 points
3 comments
June 16, 2026
Related Discussions
Found 5 related stories in 343.2ms across 15,510 title embeddings via pgvector HNSW
- FIFA World Cup Triggers a Global Anti-Piracy Crackdown gslin · 31 pts · July 19, 2026 · 56% similar
- EU Age Verification Hacked in 2 Minutes: What Happened bigbugbag · 12 pts · April 20, 2026 · 47% similar
- Building watchable digital twins of 64 World Cup games rogerdickey · 18 pts · July 23, 2026 · 46% similar
- FIFA World Cup 2026 Data Portraits sebg · 31 pts · July 16, 2026 · 45% similar
- Hackers Asked Meta AI to Give Them Access to Instagram Accounts. It Worked pulisse · 22 pts · June 01, 2026 · 43% similar
Discussion Highlights (1 comments)
BobDaHacker
Registered on FIFA's public Agent Platform with my ID, got added to their Microsoft Entra tenant, and found the Angular app only checked roles client-side. The backend APIs served everything: RTMP ingest URLs and stream keys for every live World Cup 2026 camera feed across all five angles. Confirmed live in VLC. An attacker could have pushed arbitrary video to the ingest endpoints and replaced broadcast feeds on TV worldwide. Write access to match stats, commentator notes, and the live score system was also exposed.