Comment by jabron

Is it even possible to "hack" an API that has no authorisation for any of its methods?