Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Notion leaks email addresses of all editors of any public page

twitter.com

Post reply on HN
Print view View original

131–140 of 162 posts

Re: Notion leaks email addresses of all editors of any public page

#131

Post by popalchemist »

mschoening wrote: post #75

Hi, this is Max from Notion. First: This is documented and we also warn users when they publish a page. But, that’s not good enough! Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits. P.S: Some folks here have speculated that this should be a 1 minute…

You should explain WHY that is not the case, or else accept that everyone's takeaway about this is that you've KNOWN you've been leaking your users' data for FOUR YEARS and have done nothing about it by CHOICE.

Re: Notion leaks email addresses of all editors of any public page

#132

Post by sph »

ArchieScrivener wrote: post #83
chinathrow wrote: post #23

Earlier quoted context omitted.

This is, as a notion user with public pages, beyond stupid.

Don't attribute to stupidity what can be explained by malice.

Yes! I’ve always maintained Hanlon’s razor needs to be reversed in matters of computer security.

Re: Notion leaks email addresses of all editors of any public page

#133

Post by ternaryoperator »

ksidosjcosjcisj wrote: post #62
lioeters wrote: post #31

Recently I checked back on Notion after a year or so of not seeing it. I was going to recommend it to someone as an example of hypertext, but I see now it calls itself an "AI workplace that works for you" and "Your AI everything app". This company means nothing now, seriously what happened.

What do you mean “now”? It never meant anything. Motion has always tried to be everything, do everything and work for absolutely everyone and that has always meant it was just a jumbled mess of pure waste of computing cycles. Notion has always been a disgrace of an app and a service—shoving AI into it is just the natural next step for a “whatever” company such as this.

While I don't share your condemnation, I do share your critique of the design. When I tried Notion--really wanting to like it--I could find essentially zero documentation about how to do use those numerous features. After wasting a ton of time trying to get a document template I wanted, I gave up and went back to simpler tools.

Re: Notion leaks email addresses of all editors of any public page

#134

Post by protocolture »

sph wrote: post #132
ArchieScrivener wrote: post #83

Earlier quoted context omitted.

Don't attribute to stupidity what can be explained by malice.

Yes! I’ve always maintained Hanlon’s razor needs to be reversed in matters of computer security.

Theres just a higher form of malicious stupidity, where the people who own these platforms can be selectively, maliciously stupid where it comes to security.

Re: Notion leaks email addresses of all editors of any public page

#135

Post by reddalo »

janalsncm wrote: post #94
mschoening wrote: post #87

Earlier quoted context omitted.

When you start contributing to a page you see this: https://cleanshot.com/share/trYdqYFZ This is pretty meh. We will deploy more explicit messaging while we mitigate this properly.

The warning is too vague. “May become visible” kind of sounds like Notion doesn’t know whether they will become visible or not.

Also, to me, "anyone who can view this page" sounds like "anyone _in this workspace_ that can view this page", not "anyone _on the public web_".

Re: Notion leaks email addresses of all editors of any public page

#136

Post by ramon156 »

hluska wrote: post #104
steve1977 wrote: post #44

Earlier quoted context omitted.

Maybe the board and shareholders of big companies need to be held accountable financially instead of being able to hide behind legal constructs.

That system has been invented already. It’s called civil law.

Considering the current president, it's going great! /s

Re: Notion leaks email addresses of all editors of any public page

#137

Post by tweetle_beetle »

Pi9h wrote: post #122
bryanhogan wrote: post #119

Earlier quoted context omitted.

I'm not sure DocMost is a Notion alternative, it's just a note-taking tool without many of the features that give Notion its unique position. I'm always disappointed by note-taking tools calling themselves a Notion alternative when they do not provide an alternative to Notion and are instead just another note-taking tool with a simple UI. If you want to be a Notion alternative provide the things that make Notion grea…

Perhaps try it first before dismissing it as just a “note-taking tool,” which it isn’t. We have support for team-spaces, permissions, diagrams, real-time collaboration, comments, page verification workflows, AI, SSO/LDAP, search, audit logs, API, public sharing, and a lot more. Btw, we have plans to introduce a database-like feature.

Confluence and Notion are not equivalent products. Docmost looks to be similar to Confluence - a full fat wiki, but the whole point of Notion was its database-like features.

Re: Notion leaks email addresses of all editors of any public page

#138

Post by blitzar »

aucisson_masque wrote: post #93
mschoening wrote: post #75

Hi, this is Max from Notion. First: This is documented and we also warn users when they publish a page. But, that’s not good enough! Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits. P.S: Some folks here have speculated that this should be a 1 minute…

> P.S: Some folks here have speculated that this should be a 1 minute fix. Unfortunately that is not the case. :( 4 years.

We have top men working on it right now

Re: Notion leaks email addresses of all editors of any public page

#140

Post by ngold »

ternaryoperator wrote: post #133
ksidosjcosjcisj wrote: post #62

Earlier quoted context omitted.

What do you mean “now”? It never meant anything. Motion has always tried to be everything, do everything and work for absolutely everyone and that has always meant it was just a jumbled mess of pure waste of computing cycles. Notion has always been a disgrace of an app and a service—shoving AI into it is just the natural next step for a “whatever” company such as this.

While I don't share your condemnation, I do share your critique of the design. When I tried Notion--really wanting to like it--I could find essentially zero documentation about how to do use those numerous features. After wasting a ton of time trying to get a document template I wanted, I gave up and went back to simpler tools.

I'm impressed, been unistalling that monster 20 years before the founder died.
Post reply on HN