11–20 of 27 posts
EDIT: removing URLs because it's the right thing to do.
Can't reproduce. But since I use heroku only for prototyping, I never received an invoice.
Oh.. because they have a good graphic designer.
Lol.
"Forget servers, instances, and VMs. Focus on processes."
If that doesn't raise some red flags for you then you get what you deserve.
EDIT: removing URLs because it's the right thing to do.
Click on 'current usage' in your account and it takes you to your current invoice, which is accessible via the URL that he mentions. It appears to be only the current months usage / invoice that is vulnerable.
Can't reproduce. But since I use heroku only for prototyping, I never received an invoice.
Why do people use Heroku? I never understood the appeal. Oh.. because they have a good graphic designer. Lol. "Forget servers, instances, and VMs. Focus on processes." If that doesn't raise some red flags for you then you get what you deserve.
Because of a good graphic designer, sure.
This isn't a case of something small going unnoticed, resulting in a bit of a laugh and giggle. This is people's billing details, and you've just explained how to exploit the bug in complete detail.
I'm really unhappy that this sort of thing even crossed your mind :/