4 ms·
Interesting. It's also interesting that Facebook developers are using Pastebin for things such as this. I would assume that they'd have an internal wiki, or gi
by anw 12y ago
Interesting.
It's also interesting that Facebook developers are using Pastebin for things such as this. I would assume that they'd have an internal wiki, or gist-like app.
It's also noteworthy to see how they set up their accounts: first initial, full lastname—same standard as many other companies. But seeing it laid out can help in the guessing of other names (or common name occurances, as you don't even need a full first name).
While some leaks may not even be effective outside Facebook's internal network (things such as database credentials, network shares… hopefully), having actual code that may be in production does pose a risk. The possiblity to see where, for instance, data isn't fully sanitized, or where information being fetched might not require proper authentication[1] is more worrying. Facebook is known for promoting "move fast and break things". Hopefully they have good QA and SDET teams to catch these things.
[2] One code snippet features the following:
> // TODO: add privacy checks!
- rjayatilleka 12y agoI'm not surprised they don't have a gist/pastebin like app. When I interned at Amazon this summer, they were just developing one, and it was still pretty alpha (persistence was buggy and lost me an entire design review of notes). Facebook is younger, so it seems fair that they don't have one.
- TTPrograms 12y agoFacebook has been around for a decade at this point. Youth isn't much of an excuse.
- prab97 12y agoThat's wrong. I have been here since June 2012 and we have internal paste.
- serge2k 12y agoamazon's internal tool works fine.
- lstamour 12y agoSpeaking of the TODO, I particularly liked how the diff suggests removing it ;-) That said, it did appear to be some kind of "enterprise" version maybe?
- spicyj 12y agoThe diff suggests removing the TODO because it adds the privacy checks. See the added canSeeFriends call.
- AdamGibbins 12y agoFacebook do have an internal pastebin, its part of their Phabricator suite, called Paste - http://phabricator.org/applications/ http://phabricator.org/applications/
- underwater 12y agoWe have an internal pastebin, it's built into Phabricator. There is no preset format for unixnames. Most people use their names but I've seen many pseudonyms. One intern famously broke some internal tools by requesting her initials, which were "www".
- dsl 12y agoI broke more than my fair share of systems by using "Roger Oot" as my goto pseudonym.
- desdiv 12y agoSorry, I don't get it. Could you please explain it?
- jsprogrammer 12y agoUnwittingly using Magic Character Sequences counts as breaking internal tools? More like exposed implementation and/or design flaws in internal tools.