Explore a conference talk that uncovers critical security vulnerabilities in a Norwegian parental app, potentially compromising children's privacy and safety. Follow the speaker's journey as they progress from basic security checks to discovering major flaws in authorization, authentication, XSS, CSRF, cookies/tokens, and third-party components. Learn how simple parameter manipulation and basic HTML/JavaScript can lead to complete system compromise. Understand the real-world consequences of poor application security and gain insights into conducting ethical security tests using a web proxy. Discover the importance of responsible disclosure in the cybersecurity field. This 56-minute presentation offers valuable lessons for developers, security professionals, and anyone interested in protecting sensitive data in web applications.