[The Register] Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list

PII protected

Personal information such as emails, phone numbers, IDs and access tokens are automatically masked before publication.