Live data from Hacker News

Home Depot GitHub token exposed for a year, granted access to internal systems

techcrunch.com

11–20 of 169 posts

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#11

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

Thanks for reminding me to uninstall that godawful app, which is like their website, but somehow even slower/clunkier.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#12

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

I feel like the home depot website is fine. It's a lot better than most other shops, I've had a good experience finding the aisle and location of items, and it's generally accurate with the amount in stock at each location. If you didn't enable precise location or have bad cell signal then that is hardly the fault of the website.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#13

Earlier quoted context omitted.

If you’ve ever tried to find an employee in one of their stores, this won’t be very surprising.

Purely anecdotal, but I found Lowe's generally had much better customer service. But maybe it's just where I live

Yeah I think it'll be location dependent. FWIW I've got both by me and they're equally terrible as far as the availability and knowledge of their employees. Lowes edges out Home Depot a tiny bit for me simply because I've never been accosted by a sanctioned in-store roaming sales person for solar or siding at Lowes (yet!).

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#14

Earlier quoted context omitted.

Purely anecdotal, but I found Lowe's generally had much better customer service. But maybe it's just where I live

Yeah I think it'll be location dependent. FWIW I've got both by me and they're equally terrible as far as the availability and knowledge of their employees. Lowes edges out Home Depot a tiny bit for me simply because I've never been accosted by a sanctioned in-store roaming sales person for solar or siding at Lowes (yet!).

I get hit up for gutter guards every trip at my Lowe’s. I have a stationary woman hawking Generac and HVAC installs at my Home Depot.

I’d agree though, it’s department dependent. The electrical at my HD is an unorganized mess, but their plumbing section is world-class. Lowe’s is oddly flip-flopped. To Lowe’s great credit, their staff has those little tablets with inventory locations on them including all the top-shelf and end cap locations the website doesn’t show. Those usually save my trip, HD doesn’t seem to have an equivalent.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#15

Wow, the non-response/communication at any time by Home Depot to all parties involved in trying to help them, is staggering.

Too busy going all-in on Flock cameras. This was the nail in the coffin for me.

[0] https://deflock.me/map#map=17/33.639428/-111.976540

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#16

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

If you go to the home depot page for torque wrenches and click the filter for drive size, you get this list: 1/2 in 1/4 in 1 in 3/8 in 3/4 in Specialty Here is the same list in decimal to make the insanity plainly obvious: 0.5 0.25 1 0.375 0.75 What sadistic lunatic made that sort order?! It's not based on size and it's not alphabetic.

It's probably a default ordering or an ordering by an unshown database ID value. It's a small enough set that it doesn't really matter for practical purposes, but I guess it does betray a lack of attention to detail.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#17

Wow, the non-response/communication at any time by Home Depot to all parties involved in trying to help them, is staggering.

Too busy going all-in on Flock cameras. This was the nail in the coffin for me. [0] https://deflock.me/map#map=17/33.639428/-111.976540

Seems that all the big box stores are doing that. Lowes does it here for sure.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#18
post #6

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

+1 also, when I'm in my local store it seems like cell connection goes to shit for some reason and then I have to jump on their in store wifi in order to search their website

They probably don't have any repeaters. All those metal shelves are going to interfere with the signal. I have the same experience.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#19
post #6

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

+1 also, when I'm in my local store it seems like cell connection goes to shit for some reason and then I have to jump on their in store wifi in order to search their website

Always wondered if this was a deliberate strategy to enable more tracking… but it sounds way beyond the ability of their corporate planning.

Re: Home Depot GitHub token exposed for a year, granted access to internal systems

#20

Given the absolute state of their website on mobile it's hardly surprising. It's faster to find an employee and ask them where an item is at instead of waiting for the search to finish, see that it the "current store" now points to a random location somewhere in a different state, pick the correct store and re-do the search

I feel like the home depot website is fine. It's a lot better than most other shops, I've had a good experience finding the aisle and location of items, and it's generally accurate with the amount in stock at each location. If you didn't enable precise location or have bad cell signal then that is hardly the fault of the website.

Nah, I use both the website and their shitty web wrapper app on a regular basis and it's been a dumpster fire for at least the last 2-3 years. 3-5 years ago when they first rebuilt everything it was much more pleasant but at this point it's clear no one is maintaining it and have just let it bloat and rot
Post reply on HN