Live data from Hacker News

Tell HN: Fiverr left customer files public and searchable

news.ycombinator.com

21–30 of 252 posts

Re: Tell HN: Fiverr left customer files public and searchable

#22
Software development jobs are too accessible. Jobs with access to/control over millions of people's data should require some kind of genuine software engineering certification, and there should be business-cratering fines for something as egregious as completely ignoring security reports. It is ridiculous how we've completely normalised leaks like this on a weekly or almost-daily basis.

Re: Tell HN: Fiverr left customer files public and searchable

#24

Software development jobs are too accessible. Jobs with access to/control over millions of people's data should require some kind of genuine software engineering certification, and there should be business-cratering fines for something as egregious as completely ignoring security reports. It is ridiculous how we've completely normalised leaks like this on a weekly or almost-daily basis.

They may be part of it, but as a publicly traded company, there's got to be a at least a few people there with a fancy pedigree (not that that actually means they are good at their job or care). But if such a test existed, they presumably would have passed it.

They also have an ISO 27001 certificate (they try to claim a bunch of AWSs certs by proxy on their security page, which is ironic as they say AWS stores most of their data while apparently all uploads are on this).

Re: Tell HN: Fiverr left customer files public and searchable

#25

This is crazy! So many tax and other financial forms out in the open. But the most interesting file I’ve seen so far seems to be a book draft titled “HOOD NIGGA AFFIRMATIONS: A Collection of Affirming Anecdotes for Hood Niggas Everywhere”. I made it to page 27 out of 63.

I've read worse. Better than Dan Brown!

that bar is subterranean, haha

Re: Tell HN: Fiverr left customer files public and searchable

#27

This is crazy! So many tax and other financial forms out in the open. But the most interesting file I’ve seen so far seems to be a book draft titled “HOOD NIGGA AFFIRMATIONS: A Collection of Affirming Anecdotes for Hood Niggas Everywhere”. I made it to page 27 out of 63.

Link please :pray:

Re: Tell HN: Fiverr left customer files public and searchable

#28
post #15

Earlier quoted context omitted.

lots of admin credentials too, which have probably never been changed

admin passwords to dating sites, that's the stuff people get blackmailed with

How does someone's dating site password end up in Fiverr?

Re: Tell HN: Fiverr left customer files public and searchable

#29
post #28

Earlier quoted context omitted.

admin passwords to dating sites, that's the stuff people get blackmailed with

How does someone's dating site password end up in Fiverr?

it's worse than you think – it's an admin password to the ~whole site~
Post reply on HN