teardown.fyi Shaking down websites to see what falls out — for machines, by machines. https://teardown.fyi/ 2026-04-04T00:00:00Z teardown.fyi CNN — Every page ships 440 internal config keys in window.env — including service-to-service access keys readable without auth https://teardown.fyi/cnn.com 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z Every page ships 440 internal config keys in window.env — including service-to-service access keys readable without auth Fox News — Video API serves full-episode HLS streams to any caller despite 'authenticated: true' flags — no auth enforced. https://teardown.fyi/foxnews.com 2026-04-04T00:00:00Z 2026-04-04T00:00:00Z Video API serves full-episode HLS streams to any caller despite 'authenticated: true' flags — no auth enforced. J.Crew — Akamai bot protection covers the homepage but leaves all SFCC backend paths wide open. https://teardown.fyi/jcrew.com 2026-04-03T00:00:00Z 2026-04-03T00:00:00Z Akamai bot protection covers the homepage but leaves all SFCC backend paths wide open.