Klarna users are being signed in to random accounts
1–10 of 517 posts
Re: Klarna users are being signed in to random accounts
#2"The payment giant Klarna, which has 87 million customers globally, currently has major technical problems. Users of the company's app saw other customers' payments and personal information, before it was shut down completely.
The supervisory authority Finansinspektionen, FI, has asked Klarna to explain what happened."
A future, fascinating post-mortem I hope!
Re: Klarna users are being signed in to random accounts
#3Reminds me of what happened to Steam a few years ago https://www.youtube.com/watch?v=dkSslseq9Y8
Re: Klarna users are being signed in to random accounts
#4I find the default Twitter response by the Klarna social media account really annoying. The issue is not a system disturbance. The issue is clearly in the whole implementation of the system itself, code which was written by developers and where something really stupid has been implemented and where security was not taken into account at all because an issue like this could have been prevented at so many layers and yet it happened.
Re: Klarna users are being signed in to random accounts
#5I've had this happen, although not on a scale as this, when implementing caching and disregarding authentication as a parameter that varies the cache...
Re: Klarna users are being signed in to random accounts
#6you have to wonder why they decided to stay up. Surely, if you have a leak this bad, you pull the plug until you can fix it.
Re: Klarna users are being signed in to random accounts
#7Just nu svettas det mer än det regnar hos Klarna i Stockholm.
Re: Klarna users are being signed in to random accounts
#8Huh, from the headline I was thinking it was intentional! Nothing but marketing fluff in the newsfeed yet, still waiting on an article that's not walled in Swedish(?).
Re: Klarna users are being signed in to random accounts
#9It will be an interesting post mortem if they make it public.
Re: Klarna users are being signed in to random accounts
#10MS Exchange outlook web interface sometimes showed me completely unrelated mailbox content upon login: folders, list of messages, read status, subjects, etc. Trying to open email never worked though and the whole problem goes away after page refresh.