5 ms·
Reminds me back at a certain large travel website I worked at, someone left the debug promo codes enabled in prod... Eventually someone found the "5000off" cod
by bearjaws 4y ago
Reminds me back at a certain large travel website I worked at, someone left the debug promo codes enabled in prod...
Eventually someone found the "5000off" code, and posted it to Slickdeals.
We had alarms for bookings that lost us money (especially with bundled flights), so it was found relatively quickly, but around 30 people had used it already...
Except SBF was just massive fraud, not a whoopsie doopsie.
- digianarchist 4y agoHow did they find the code? Brute force?
- deleted 4y ago[deleted]
- radlad 4y agoProbably. for i := 0; i <= 999999; i++ { code = fmt.Sprintf("%doff", i) } "X% off" codes are pretty common.
- sC3DX 4y agoI usually try random codes with the following format: COMPANYNAME15, COMPANYNAME20, etc. Every once in a while (maybe 10% of the time?) I get lucky.
- tssva 4y agoWELCOME10, WELCOME20, etc also work a good amount of the time. A lot of the sign up for our mailing list and get a discount promo codes match up to WELCOME plus the percentage off.
- lcnPylGDnU4H9OF 4y ago"5000off" sounds like the discount code equivalent of "password" as a password. So probably just a wild guess as a joke but then it wasn't a joke.
- Kon-Peki 4y ago> How did they find the code? They had a MBP with a butterfly keyboard
- tru3_power 4y agoIf 5OFF worked why not try 500/5000off?
- Eduard 4y agoWhat would the "5000off" promo code do? Provide a discount by 5000 gazillion percent?
- upon_drumhead 4y agoI would presume $5,000.00 off
- scosman 4y agoI'd assume $5000?
- awb 4y agoOr maybe 5,000 points ($50)? $5k off is a huge discount!
- sirsinsalot 4y agoIt was a debugging code so it being large isn't an issue
- lmkg 4y agoA QA walks into a bar, orders a beer, pays with a $5,000-off coupon. Test passes
- lowkeyokay 4y agoMaybe it was for testing the alarm
- bearjaws 4y ago$5000 off your entire booking, down to $0.
- contingencies 4y agoFor codebases with deployment modes, best practice may be to have a test process defined in your CI/CD to run when you spin-up prod that verifies all non-prod features are fully disabled.
- saladdressing 4y agoThank you for that.
- mousetree 4y agoYou learn something new every day
- lifefeed 4y agoAt a certain shoe online retailer I worked at, we had a hard limit on the maximum discount, and it was built into the code. Not configurable, and not overridable. There were a lot of problems with that codebase, and some of those problems probably led to that particular solution, but I liked it.
- pacaro 4y agoThe hoover free flights promotion is a good cautionary tale https://en.m.wikipedia.org/wiki/Hoover_free_flights_promotion https://en.m.wikipedia.org/wiki/Hoover_free_flights_promotio...