Live data from Hacker News

Tell HN: Fiverr left customer files public and searchable

news.ycombinator.com

191–200 of 252 posts

Re: Tell HN: Fiverr left customer files public and searchable

#191

it's been 5 hours. even manual action to take down the most sensitive files should have completed about 3 hours ago at most. what is happening.

My guess is that if they take down the public hosting, most clients would lose access to work they paid for and fiverr has no way to put these back behind an authorisation. It is just a public list of files, either everyone has access to your file, or do not, including you.

Re: Tell HN: Fiverr left customer files public and searchable

#192
post #70

Extremely bad stuff here. Can't believe it's been 7 hours now and you can still pull up people's complete prepared tax returns right from a Google search. This should be a business-ending breach of trust and good practices, but I worry there's probably a lack of regulatory might or will to make anything happen.

Technically, 40 days and 7 hours!

...and forty nights...

Re: Tell HN: Fiverr left customer files public and searchable

#193
post #129

I tried posting a warning to /r/fiverr but the admins removed the post. And the files are STILL public...how in the world is "sitting it out" their course of action? Edit: I'm beginning to wonder if they might be locked out of their own site at this point. How hard could it be to just shut down the asset server until they get it sorted?

If the assets are public and not associated to my account, how could they ever restore access if they made them inaccessible?

Re: Tell HN: Fiverr left customer files public and searchable

#194
post #134

Earlier quoted context omitted.

Amazing that a company whose whole brand is based on hiring people for $5 turns out to not respect the workers who created value on their platform.

I get your criticism, however, there was a lot of talent working on the platform for many years. I was averaging 150 USD per project, significantly more than 5 USD. Last year Fiverr started to push AI to the detriments of their freelancers, as well as a new "success score" metric, but never specifying how these metrics are calculated, making it very hard for freelancers to do something about it. This caused many acco…

> This caused many accounts to "lose value" and thus rank lower on searches

wouldn't this make some other accounts rank higher on searches then? I mean it couldn't have been a problem that affected absolutely everyone so for someone it must've been a positive change.

Re: Tell HN: Fiverr left customer files public and searchable

#197

it's been 5 hours. even manual action to take down the most sensitive files should have completed about 3 hours ago at most. what is happening.

My guess is that if they take down the public hosting, most clients would lose access to work they paid for and fiverr has no way to put these back behind an authorisation. It is just a public list of files, either everyone has access to your file, or do not, including you.

But it seems like they might've just pulled the plug for everyone. I cannot access images from a seller. They throw a 404 as well.

Re: Tell HN: Fiverr left customer files public and searchable

#200
post #130

Earlier quoted context omitted.

@dang doesn't work write an email if you mean your comment in a non performative way.

Oh? I've seen him respond to that many times in the past...assumed he had some hook for those.

No, he just reads HN like we do

Sometimes users email him links to them

I stopped doing that after one guy said “why shouldn’t I use @dang when you’ll just send an email for me”

If you want dang to see your comment and reply (and remember it’s dang/tomhow now), email a link to your comment to the mods using the footer contact link along with a note

Post reply on HN