No Rules, No Locks: Firebase Misconfiguration and the Borrowers It Left Behind

Firebase security rules are opt-in. The default, for every new database & storage bucket, is wide open. This is the writeup of a…