Tl;dv: Over 180k meetings left wide open • Hacker News Board

Re: Tl;dv: Over 180k meetings left wide open

#11

Post by new_account_900 » Mon, Aug 10, 2026, 1:18 PM UTC

[dead]

Re: Tl;dv: Over 180k meetings left wide open

#12

Post by Aeroi » Mon, Aug 10, 2026, 1:22 PM UTC

holy crap. how do you respond as CEO to this and not escalate to like priority #1?

then kick the can for 6 months?

Re: Tl;dv: Over 180k meetings left wide open

#13

Post by gyanchawdhary » Mon, Aug 10, 2026, 1:22 PM UTC

This is bad. I run a company in this space (deepfake voice phishing), and one of the most common pushbacks we hear from buyers is: “Where are attackers going to get audio clips of our employees?” ... excluding senior leadership, which most companies already recognize as a risk.

Another similar incident that happened recently was 4TB/40,000 contractors voice + government ID + selfie leaked .. https://oravys.com/blog/mercor-breach-2026

PS: To demonstrate how this can be exploited with real time voice changers i.e. a voice phishing simulator .. we also built a free tool that shows this attack combined with someones voice ..

https://www.callstrike.ai/voice-phishing-simulator (Voice Phishing Simulator)

https://www.callstrike.ai/deepfake-security-training (Deepfake Video Simulator)

It’s obviously a heavily restricted PoC, but it helps demonstrate the attack path in practice.

Re: Tl;dv: Over 180k meetings left wide open

#14

Post by Oras » Mon, Aug 10, 2026, 1:23 PM UTC

Not the first time I read a shitty implementation with Firebase, I'm not blaming the platform, but seems there is a huge skill issues around it.

Wasn't a dating app exposed this year with same negligence or firebase security?

Re: Tl;dv: Over 180k meetings left wide open

#15

Post by hluska » Mon, Aug 10, 2026, 1:25 PM UTC

I understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?

Re: Tl;dv: Over 180k meetings left wide open

#16

Post by [deleted] » Mon, Aug 10, 2026, 1:30 PM UTC

idiotsecant wrote: post #3

Is this still active? I wouldn't mind spying on some meeting notes. Sounds fun.

[deleted]

Re: Tl;dv: Over 180k meetings left wide open

#17

Post by root-parent » Mon, Aug 10, 2026, 1:32 PM UTC

hluska wrote: post #15

I understand the need to shame this platform, but why expose all their clients to this much risk? This disclosure here just named a whole bunch of clients. Why?

You need to read the article.

Re: Tl;dv: Over 180k meetings left wide open

#18

Post by root-parent » Mon, Aug 10, 2026, 1:32 PM UTC

Aeroi wrote: post #12

holy crap. how do you respond as CEO to this and not escalate to like priority #1? then kick the can for 6 months?

A post on LinkedIn where this CEO seems very active should solve that.

Re: Tl;dv: Over 180k meetings left wide open

#19

Post by seb1204 » Mon, Aug 10, 2026, 1:33 PM UTC

So did he email privacy@tldv.io? Why not? Maybe someone who understands it would read it.

Re: Tl;dv: Over 180k meetings left wide open

#20

Post by lostlogin » Mon, Aug 10, 2026, 1:34 PM UTC

gyanchawdhary wrote: post #13

This is bad. I run a company in this space (deepfake voice phishing), and one of the most common pushbacks we hear from buyers is: “Where are attackers going to get audio clips of our employees?” ... excluding senior leadership, which most companies already recognize as a risk. Another similar incident that happened recently was 4TB/40,000 contractors voice + government ID + selfie leaked .. https://oravys.com/blog/m…

> 4TB/40,000 contractors voice + government ID + selfie leaked

Leaked selfies? Do you mean ID photos?