Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Notion leaks email addresses of all editors of any public page

twitter.com

Post reply on HN
Print view View original

101–110 of 162 posts

Re: Notion leaks email addresses of all editors of any public page

#101

Post by cm11 »

lioeters wrote: post #31

Recently I checked back on Notion after a year or so of not seeing it. I was going to recommend it to someone as an example of hypertext, but I see now it calls itself an "AI workplace that works for you" and "Your AI everything app". This company means nothing now, seriously what happened.

I haven't used Notion the last couple of years either, but there was a multi-year period where someone at each of the companies I was at would champion it, convince someone high enough to transition the team to it, and it would slow the team down so much. There was a joke at one point amongst coworkers that it might not be bad subterfuge to get someone hired at a rival in order to introduce Notion there.

Anyways, I think Notion has a learning curve that is a little longer than one expects. I can believe that with some dedicated learning time I could be turned into a believer. But I also distinctly had the impression that it was one of those things where it saved a ton of time for a few narrow-visioned people (the people who championed it), but added meaningful time to everyone else's. Those people were largely project managers or operations folks, and transitively the leaders they reported to. It heavily threw the switch towards "legibility" over reality.

It's like when someone new to a messy project, creates a spreadsheet, and says, "Let not overthink this, everybody just fill in your project details in your row". If your work, which you are the expert on, doesn't fit nicely into the person's columns, it's not easy for you to fill out. Meanwhile, the person who created the spreadsheet, gets what looks like a neat and orderly answer to everything. All the messy things—which are or at least have in them the correct status of the thing—will be masked under a clean and simple, but rather incorrect, thing. That spreadsheet will also travel far specifically because it's neat and therefore portable. There aren't a bunch of "it depends" in it.

Re: Notion leaks email addresses of all editors of any public page

#102

Post by andrelaszlo »

mschoening wrote: post #75

Hi, this is Max from Notion. First: This is documented and we also warn users when they publish a page. But, that’s not good enough! Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits. P.S: Some folks here have speculated that this should be a 1 minute…

While you're here, why is Notion so slow on Firefox? I mean extremely slow.

Re: Notion leaks email addresses of all editors of any public page

#103

Post by matheusmoreira »

d0mine wrote: post #73
matheusmoreira wrote: post #36

Earlier quoted context omitted.

Rejecting the government is insurrection, it's the same as becoming a terrorist.

You are called terrorist only until you win then you are a freedom fighter. You even may be called freedom fighter from the start if you are trying to displace government in the right country. There are plenty of examples.

I realize that. I'm just saying that "reject the government" is a radical choice. It's not something the average first world citizen is going to think about. US government has been eroding the freedom of americans for nearly a century now. American citizens have a bigger arsenal than many actual countries out there. And what do they do with all of those weapons? Literally nothing.

Only those who are willing to die have the power to truly change the world. Those who don't want to die are dominated by those who do. The average citizen of a civilized society has a lot to lose. They don't want to die over nothing. They want to get even richer and enjoy an even better life. It's the people who have nothing to lose and everything to gain who are radicalized.

Re: Notion leaks email addresses of all editors of any public page

#104

Post by hluska »

steve1977 wrote: post #44
DropDead wrote: post #2

Big companys need to start caring more security and privacy of its users and employees

Maybe the board and shareholders of big companies need to be held accountable financially instead of being able to hide behind legal constructs.

That system has been invented already. It’s called civil law.

Re: Notion leaks email addresses of all editors of any public page

#105

Post by hluska »

estimator7292 wrote: post #4
DropDead wrote: post #2

Big companys need to start caring more security and privacy of its users and employees

The problem is that they don't "need" to. There's no consequences for not caring, and no incentive to care. We need laws and a competent government to force these companies to care by levying significant fines or jail time for executives depending on severity. Not fines like 0.00002 cents per exposed customers, existential fines like 1% of annual revinue for each exposed customer. If you fuck up bad enough, your comp…

This is genuinely the stupidest thing I have read today. I get that anti-capitalism is cool now but this is fucking insane. You want to incarcerate someone for exposing email addresses on a public service? Absolute madness.

Re: Notion leaks email addresses of all editors of any public page

#106

Post by resident423 »

DropDead wrote: post #2

Big companys need to start caring more security and privacy of its users and employees

Companies will only care if they have a reason to. People need to start caring about their privacy and security and be willing to change product if they have to. We can blame companies and insist they start caring, but this makes no difference to them, people complain for a while and then they move on and the earnings remain unchanged.

Re: Notion leaks email addresses of all editors of any public page

#107

Post by hluska »

knome wrote: post #15
rafram wrote: post #7

Earlier quoted context omitted.

This kind of response went out of fashion after Enron. Burning an entire company to the ground (in that case Arthur Andersen) and putting thousands out of work because of the misdeeds of a few - even if they were due to companywide culture problems - turned out to be disproportionate, wasteful, and cruel.

the answer to that is a functional social safety net for the innocent employees to land in, not allowing companies to violate the law with impunity.

First off, adults use capital letters. I know it’s hard but it’s a basic part of our language. I would respect you and your arguments more if you used them. Second, your idea is as naive as your writing is poor. The issue with AA was that accounting doesn’t provide a lot of bounce and recover space for people whose firms go belly up in the way that AA did. A social safety net has precisely zero to do with the loss of a lot of dreams.

If you read more you’d know that (and you would use capitals).

Re: Notion leaks email addresses of all editors of any public page

#109

Post by _kl »

mschoening wrote: post #79
ktallett wrote: post #77

Earlier quoted context omitted.

Considering it was reported in 2022, and it is obviously an error, I don't think it is unfair for people here to have expected it to be fixed by now since it was first reported.

I agree. We will do better.

Can you please share an update when you can? will this be prioritised and fixed or not.

Re: Notion leaks email addresses of all editors of any public page

#110

Post by nashashmi »

mschoening wrote: post #87
wferrell wrote: post #84

Earlier quoted context omitted.

Can you share the warning? I made a public page and would say it was not clear to me this was a consequence of doing that. The warning as I remember it (a month ago) makes it sound like the information on this page is going to be public -- not - oh yeah the email addresses of everyone who edited this page will also be leaked.

When you start contributing to a page you see this: https://cleanshot.com/share/trYdqYFZ This is pretty meh. We will deploy more explicit messaging while we mitigate this properly.

Please also especially clarify that IDs of contributors will be public. Meh is good, but this was a bit too simple.

There is a way to mitigate this. Re-hash and cache the page to be meta-less for public URLs. I guess that requires a huge amount of coding for a team that has not built the product from the ground up. But I feel like a "copy and paste" could fix that (remove author data).

Post reply on HN