Don't have Telegram yet? Try it now!
https://footstep.ninja/posts/idor-via-http/
I just read "Story of an IDOR via HTTP"