HubSpots recording links are not authenticated and therefore publicly accessible | Dark Hacker News