4 ms·

Why debug mode is not good for production (clear-text password)

10 points by ziodave 13y ago

josegonzalez 13y ago
Did anyone else receive spam from an app called "Sway" and get this page? This happened to three employees where I work and we were all very confused as to why it was referencing people at our company.
- deleted 13y ago
  [deleted]
- thibaut_barrere 13y ago
  I also got mail from Sway, as many other on twitter. What isn't clear is why the link pointed to carbonhire. Did the Sway mailing list got hacked in some way etc? I wonder.
  - ceejayoz 13y ago
    http://twitter.com/bos31337/status/451429219881324544/photo/1 http://twitter.com/bos31337/status/451429219881324544/photo/... shows their database username as "geniushire" which looks like a recruiting platform owned by CarbonHire (http://www.geniushire.com/ http://www.geniushire.com/). Might be two startups from the same team, or more nefariously, maybe it's a dating app that's a front for a recruiter's data collection.
- Octplane 13y ago
  Yep. Interestingly, the company name was correct, but the email was one of my personal emails...
- rickyc091 13y ago
  Got an email from Sway wasn't sure where it was from. The email address was my github email address tho...
odbol 13y ago
Posts like this is why Hacker News needs a downvote button. Or better moderators.
- ceejayoz 13y ago
  HN does have a downvote ("flag") button.
- ziodave 13y ago
  Yes, especially for comments like this.
ceejayoz 13y ago
They appear to have turned the URL off. http://twitter.com/bos31337/status/451429219881324544/photo/1 http://twitter.com/bos31337/status/451429219881324544/photo/... has a photo of it.
nasalgoat 13y ago
Not mentioned is them directly referencing a specific AWS instance by name rather than via DNS alias, which also highlights how it's amateur hour over there. It brings up a side point in how amateur hour it is everywhere in the dating space - Tinder's amazing lack of even basic security for example. Is everyone just terrible at this or are my expectations just too high?

10 points by ziodave 13y ago

Did anyone else receive spam from an app called "Sway" and get this page? This happened to three employees where I work and we were all very confused as to why it was referencing people at our company.

deleted 13y ago
[deleted]
thibaut_barrere 13y ago
I also got mail from Sway, as many other on twitter. What isn't clear is why the link pointed to carbonhire. Did the Sway mailing list got hacked in some way etc? I wonder.
- ceejayoz 13y ago
  http://twitter.com/bos31337/status/451429219881324544/photo/1 http://twitter.com/bos31337/status/451429219881324544/photo/... shows their database username as "geniushire" which looks like a recruiting platform owned by CarbonHire (http://www.geniushire.com/ http://www.geniushire.com/). Might be two startups from the same team, or more nefariously, maybe it's a dating app that's a front for a recruiter's data collection.
Octplane 13y ago
Yep. Interestingly, the company name was correct, but the email was one of my personal emails...
rickyc091 13y ago
Got an email from Sway wasn't sure where it was from. The email address was my github email address tho...

odbol 13y ago

Posts like this is why Hacker News needs a downvote button. Or better moderators.

ceejayoz 13y ago
HN does have a downvote ("flag") button.
ziodave 13y ago
Yes, especially for comments like this.

ceejayoz 13y ago

They appear to have turned the URL off. http://twitter.com/bos31337/status/451429219881324544/photo/1 http://twitter.com/bos31337/status/451429219881324544/photo/... has a photo of it.

nasalgoat 13y ago

Not mentioned is them directly referencing a specific AWS instance by name rather than via DNS alias, which also highlights how it's amateur hour over there. It brings up a side point in how amateur hour it is everywhere in the dating space - Tinder's amazing lack of even basic security for example. Is everyone just terrible at this or are my expectations just too high?