Live data from Hacker News

Tell HN: Fiverr left customer files public and searchable

news.ycombinator.com

201–210 of 252 posts

Re: Tell HN: Fiverr left customer files public and searchable

#202
post #60

Earlier quoted context omitted.

Normalize "vibe-plumbing"

Both plumbing and wiring are “easier” in a way than programming-as they’ll violently and potentially explosively let you know if you messed up; whereas programming lets you be blissfully unaware until you see your data plastered across the nightly news.

I'm in the midst of renovating a house at the moment, it's about ten years old.

The plumber siliconed all the shower valves to the fiberglass walls without screwing them to a backplate.

Unsurprisingly the builder is now out of business.

Re: Tell HN: Fiverr left customer files public and searchable

#203
post #186

Earlier quoted context omitted.

> Freeze your credit at all bureaus if you ever used this site. People should always have their credit frozen no matter what. It's free and only takes a few minutes to unfreeze when you need to apply for credit Yes it's a little bit inconvenient but so is suddenly having a car, insurance, and several iPhones in your name when somebody steals your identity...

My Experian score once took a substantial hit, dropping from ~800 to ~700 or something like that. Didn’t change elsewhere. I applied for the report and realized a quite significant debt appeared on my report, and it wasn’t even in my name! It was under someone else’s name that bore zero similarity to mine, or anyone in my family. Reported to Experian and it got fixed after a week or two. Zero explanation for how it h…

That's more of the fault of whichever institution gave the loan

Re: Tell HN: Fiverr left customer files public and searchable

#204
post #70

Extremely bad stuff here. Can't believe it's been 7 hours now and you can still pull up people's complete prepared tax returns right from a Google search. This should be a business-ending breach of trust and good practices, but I worry there's probably a lack of regulatory might or will to make anything happen.

It looks like they (cloudinary?) blocked the content.

Each result from the query site:fiverr-res.cloudinary.com form 1040 returns 404

Re: Tell HN: Fiverr left customer files public and searchable

#205
post #202
post #60

Earlier quoted context omitted.

Both plumbing and wiring are “easier” in a way than programming-as they’ll violently and potentially explosively let you know if you messed up; whereas programming lets you be blissfully unaware until you see your data plastered across the nightly news.

I'm in the midst of renovating a house at the moment, it's about ten years old. The plumber siliconed all the shower valves to the fiberglass walls without screwing them to a backplate. Unsurprisingly the builder is now out of business.

https://structuretech.com/?s=new+construction and the "That Ain't Right" guy https://www.tiktok.com/@gold.star.inspections are enough to tell you that if you're buying new, you want to get there before it's built, from a builder that's been in business for at least a generation, and have your own inspector riding their ass the whole way.

Re: Tell HN: Fiverr left customer files public and searchable

#206

Earlier quoted context omitted.

It kind of is, though. Google doesn't randomly try to visit every URL on the internet. It follows links. Therefore, for these files to be indexed by Google, they need to be linked to from somewhere.

> Therefore, for these files to be indexed by Google, they need to be linked to from somewhere. So? That’s indeed how Google works. Google does not work how OP describes it. I’ve investigated similar incidents in the past on other platforms, it was always user error causing links to be public.

Can you actually explain why the phrase you cited from OP is wrong? You say that ~”files need to be linked to from somewhere” is correct. How is a file linked to from somewhere [on the internet] if it’s not being served on the internet that Google crawls (ie, HTML)? The only alternative is in… API calls? That Google probably isn’t crawling?

“Fiverr might be hosting public HTML somewhere” seems like an entirely reasonable alternative phrase to “these links must be linked from somewhere [that Google can crawl] “, at least to someone who is only superficially familiar with how search works.

The distinction you imply is obvious is not, and your point is thus rather confusing to someone who is not you.

Re: Tell HN: Fiverr left customer files public and searchable

#207
post #130

Earlier quoted context omitted.

Oh? I've seen him respond to that many times in the past...assumed he had some hook for those.

No, he just reads HN like we do Sometimes users email him links to them I stopped doing that after one guy said “why shouldn’t I use @dang when you’ll just send an email for me” If you want dang to see your comment and reply (and remember it’s dang/tomhow now), email a link to your comment to the mods using the footer contact link along with a note

The Algolia-linkin’ king ain’t doing a Regex->notification thing, OK! Thank you

Re: Tell HN: Fiverr left customer files public and searchable

#209
Update: Fiverr denies allegations of a cybersecurity incident on X.

“To be clear, this is not a cyber incident. Fiverr does not proactively expose users’ private information. The content in question was shared by users in the normal course of marketplace activity to showcase work samples, under agreements and approvals between buyers and sellers. This type of content requires the buyer’s consent before it can be uploaded. As always, any request to remove content is handled promptly by our team.”

Re: Tell HN: Fiverr left customer files public and searchable

#210

Earlier quoted context omitted.

I get your criticism, however, there was a lot of talent working on the platform for many years. I was averaging 150 USD per project, significantly more than 5 USD. Last year Fiverr started to push AI to the detriments of their freelancers, as well as a new "success score" metric, but never specifying how these metrics are calculated, making it very hard for freelancers to do something about it. This caused many acco…

> This caused many accounts to "lose value" and thus rank lower on searches wouldn't this make some other accounts rank higher on searches then? I mean it couldn't have been a problem that affected absolutely everyone so for someone it must've been a positive change.

I assume it did not affect everyone indeed. However, a lot of "Top Rated" sellers, who were raking in good amounts of money saw their income fall drastically, while still providing the same quality of work. The only thing that changed was their Success Score being lower.

It's very hard to improve a metric when you don't know what are the criteria affecting the metric. I've reached out to Fiverr regaring this and they never bothered to tell anyone what impacted your Success Score. "Just do better", they told me.

Post reply on HN