9 ms·
I suspect this might be request threading/confusion[0] issue similar to the one GitHub experienced a while back. This would explain why seemingly random user da
by K0nserv 5y ago
I suspect this might be request threading/confusion[0] issue similar to the one GitHub experienced a while back. This would explain why seemingly random user data is being returned.
0: https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare-race-condition-in-our-session-handling/ https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare...
- toxik 5y agoWe can only speculate, but what baffles me is that it happens for something so private, and for a company that is so rich. Do they not audit their code? Do they not risk assess these things? "Ah, storing user credentials in thread local storage, that sounds sane and bug-proof" said no auditor, ever.
- deleted 5y ago[deleted]
- corroclaro 5y agoIIRC, Klarna is mostly written in Erlang, Scala and some parts in Clojure. If someone should be aware of thread-local storage and its implication it ought to be them.
- K0nserv 5y agoI was under the impression that they had switched to Java more in recent years
- def_true_false 5y agoUsing trendy tech doesn't solve much by itself. Especially if you can't (or don't) compete with FAANG on compensation.
- sidebits 5y agoThis has changed many years ago.