Hacking Haircuts

While booking a haircut, I stumbled across a web app that let anyone view thousands of client details just by guessing a name. Here's how it happened, what went wrong, and how the company handled it.