I remember in the mid 90s I was looking at Linux World’s website and they had just implemented account registrations that same day. I was fuzzing the website and they had left directory browsing enabled and the users, passwords, and email was sitting in a plain text flat file that was world readable.
I emailed them, didn’t get a response but within the hour the registration/login was disabled along with no more directory browsing.












My daily drivers in 1994 <3