Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Collections, a fast multiple-account Google Docs client for Mac

beta.collections.me

Post reply on HN
Print view View original

61–70 of 101 posts

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#61

Post by jordanlee »

xb95 wrote: post #57
tonyx wrote: post #54

Earlier quoted context omitted.

thanks xb95, it took a minute to take effect, but issue is now fixed.

As of right now, 3:16 PM PDT, I can still connect to (one of) your Postgres databases. # psql --host=ec2-23-21-85-231.compute-1.amazonaws.com --port=5432 -U ruwdncbzdkulsh dc6jnvg2ce8qim Password for user ruwdncbzdkulsh: psql (9.1.4) SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256) Type "help" for help. dc6jnvg2ce8qim=> SELECT NOW(); now ------------------------------- 2012-07-13 22:17:51.821052+00 (1 row)

Hi Xb95, we first removed the heroku add-on and thought that it would automatically destroy the database, but that turned out not to be the case. So what we did to fix the issue was purge all of the tables from the database. Now the credentials still work, but they reach an empty database without any content. We're working on revoking the access token for all affected users right now. Thanks for helping us through this.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#62

Post by 147 »

thomas-st wrote: post #34

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

How did you get that info and how would I prevent this from happening?

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#63

Post by alpb »

mratzloff wrote: post #15
mross462 wrote: post #12

Couldn't get past clicking next.

Application Error An error occurred in the application and your page could not be served. Please try again in a few moments. If you are the application owner, check your logs for details.

Yes I get the Heroku error page too. I believe this can be crowdfunded very well.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#65

Post by xb95 »

jordanlee wrote: post #61
xb95 wrote: post #57

Earlier quoted context omitted.

As of right now, 3:16 PM PDT, I can still connect to (one of) your Postgres databases. # psql --host=ec2-23-21-85-231.compute-1.amazonaws.com --port=5432 -U ruwdncbzdkulsh dc6jnvg2ce8qim Password for user ruwdncbzdkulsh: psql (9.1.4) SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256) Type "help" for help. dc6jnvg2ce8qim=> SELECT NOW(); now ------------------------------- 2012-07-13 22:17:51.821052+00 (1 row)

Hi Xb95, we first removed the heroku add-on and thought that it would automatically destroy the database, but that turned out not to be the case. So what we did to fix the issue was purge all of the tables from the database. Now the credentials still work, but they reach an empty database without any content. We're working on revoking the access token for all affected users right now. Thanks for helping us through th…

I have confirmed that there is no longer any data in the database I can connect to. Thank you for taking care of this.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#66

Post by tonyx »

drivebyacct2 wrote: post #58
mukaiji wrote: post #43

Earlier quoted context omitted.

no. these guys are legit. they work in our sandhill office. They're not out to steal your login credentials.

If they're legit, why are they not using oAuth?

We are using Google's oauth2 protocol. No user password is stored or even ever transmitted to our server.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#67

Post by kuhn »

kuhn wrote: post #64

Great idea, just wish it wasn't crashing on me. Also the security issues which the others have are a bit of a worry.

I should add the error I'm getting is:

"An error occurred in the application and your page could not be served. Please try again in a few moments.

If you are the application owner, check your logs for details."

This happens when I clicking allow on the oauth permission screen.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#68

Post by philfreo »

147 wrote: post #62
thomas-st wrote: post #34

psql -h ec2-107-22-171-68.compute-1.amazonaws.com -p 5732 -U u1npugarlguimh -d ddbs2kvmqeieon Since DEBUG=True, finding the password is left as a trivial exercise for the reader. I wouldn't trust the service until they fix the issue.

How did you get that info and how would I prevent this from happening?

Don't deploy Django apps with DEBUG=True in production. Or more generally, don't let your production environment spit our error messages with debug information that reveals internals of your app.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#69

Post by jordanlee »

bdittmer wrote: post #59
natrius wrote: post #48

Earlier quoted context omitted.

I haven't used this so I'm not sure what's going on, but I believe OAuth involves a redirect back to servers controlled by the third party to actually do something with the authentication token. This doesn't strike me as necessarily fishy.

I guess I don't understand why they even need to store anything on their servers?

Hi bdittmer, we don't store any of your content, nor any of your passwords. We only store meta data that describes the organization of your documents and do so server-side so that we can add features in an upcoming release that we otherwise wouldn't be unable to add.

Re: Show HN: Collections, a fast multiple-account Google Docs client for Mac

#70

Post by drivebyacct2 »

tonyx wrote: post #66
drivebyacct2 wrote: post #58

Earlier quoted context omitted.

If they're legit, why are they not using oAuth?

We are using Google's oauth2 protocol. No user password is stored or even ever transmitted to our server.

Well I'm not at a Mac so I can't confirm but it's unfortunate to see such misinformation in this thread. I apologize for repeating it, I was too trusting of other comments.
Post reply on HN