4 ms·
I'm confused how this was able to give out money before the new code was submitted to production. The author claims that both she and her coworker tested it bef
by richard_mcp 4y ago
I'm confused how this was able to give out money before the new code was submitted to production. The author claims that both she and her coworker tested it before the code was submitted and they ended up with the extra $25k. Was this code only executed on the front end? Were there no checks in the backend to prevent employees from just pulling out whatever money they wanted?
- dmix 4y agoThe way she said it ‘crashed’ and you could just reload the page, and that it was frontend work also points to browser js code? So yeah I’m curious how that worked too.
- hk__2 4y agoAs I understand it the code gave you $25k credit, not $25k actual money.
- tartoran 4y agoYeah but you missed the funny part in front of money.
- kleinsch 4y agoFor some systems in that environment, the back-end for dev was actual production. Keep in mind that wasn’t handing out actual money, it was creating ads credit.
- justinator 4y agoLocal was front end stuff, back end was still talking to production.
- rockinghigh 4y agoAs I understand, the frontend and backend code run in a development environment but the funds available were stored in a production database.
- adamsb6 4y agoThe way that things work at this particular company is that you typically test changes in this codebase on your dev machine, but usually the dev machine talks to a prod database. The prod database is too large to practically have a second copy sitting around for testing. Also, if you tested on some pristine small test database you're going to end up missing bugs that would only manifest with actual prod data.