Viewing profile — g48ywsJk6w48

This is not a data leakage. They deliberately included 999 of their customers' email addresses in publicly accessible JavaScript code in order to test certain features on them.

I was curious to know which service provider they use. So I went to look at the source code of their websites.

Yes, and it's a company that makes hundreds of millions of dollars a year.

Just open app.medvi.org and search in DevTools gmail/yahoo/icloud and you will see js bundle with emails. or seasonhealth/openloophealth to find another js bundle with staff emails…

Would you like me to show you specific JavaScript files right here?

Yes, LLM assisted.

They look like real people's email addresses. I checked a few. They belong to real people.

Medvi is a telehealth pharmacy that has received significant media attention recently. While browsing their site with DevTools open, I noticed that their public JavaScript bundle c…

Thank you for sharing such a great product. Last week after getting fed up with a lot of slow commercial products and wrote my own similar app that works locally in the loop and ca…

There are indeed several services that help manage subscriptions and the budget for them. There are separate applications that help manage passwords and track password database lea…

Thank you for data set!!! It is not always lowercase, so it have some duplicates. Also you can avoid unnecessary data with analyze CNAME records. -- domain.tld CNAME www.domain.tld…

Unfortunately, he did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another …

Unfortunately, Brian Krebs did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just…

Unfortunately, they did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just anothe…

Unfortunately, he did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another …

I absolutely agree. It is unlikely that I will be thanked for such an act. Destroy the reputation of a company with 10+ years of experience on the market. And force dozens of other…

Security research is my hobby. Yesterday I found a pretty big (estimated at tens of thousands of records) data leak. Full name, date of birth, mail, phone, address. Nothing to do w…