Live data from Hacker News

Klarna users are being signed in to random accounts

twitter.com

201–210 of 517 posts

Re: Klarna users are being signed in to random accounts

#201

Does Klarna still do the IQ test as part of their hiring process?

Oh boy this brought back memories for me.

I thought that IQ test was screening test, pre-phone interview. But no, they had me redo it at the onsite interview too. The funny part was the onsite test had the exact same questions as pre-phone interview.

edit: typo

Re: Klarna users are being signed in to random accounts

#203

Klarna is a weird company. Last I interacted with them it was clear that they are completely designed to operate within Sweden, but have no idea of how to deal with the outside world. Maybe that have changed. I talked to Klarna maybe 10 years ago. One of the things I wanted to know was how they dealt with abuse in Sweden, given you just need the social security number of a person and then you can do purchase as that…

> "Why would anyone do that?"

That's such a typical Swedish answer... but they do allow (but not as default!) to block orders and request digital confirmation

Re: Klarna users are being signed in to random accounts

#205

Does Klarna still do the IQ test as part of their hiring process?

tangential thought, but related: I am, in general, a proponent of nuclear energy as a green alternative to whatever the hell we are doing today. But when I see such stories that humans manage to fuck up simple payment processing apps, still make errors while maintaining bridges, still manage to do hugely negligent screw-ups (most likely corrupt) in *cable cars maintenance*, I immediately think that it is imminent, th…

I kind of get the worry, but the requirements and processes seem to scale exponentially with reliability needs. Online companies may fuck up every day in new and creative ways and we barely get to hear about it. On the other hand we know of every nuclear failure so far with enough public details to discuss the whole time line, system design, steps each person followed, etc. and the death count is still minimal. Then each of those is an input to the future processes. Nuclear power plants and air traffic are in their own class of reliability and safety processes - not even comparable to that's happening in internet commerce.

Re: Klarna users are being signed in to random accounts

#206

Totally anecdotal, and probably unrelated, I interviewed for Klarna a few years ago. Mid process, they sent me some sort of timed bizarre IQ test that the recruiter claims EVERYONE who works there has to take. That's when I knew that kind of working culture wasn't for me.

A recruiter contacted me aswell and I asked about their salary. They pay 50k euro for juniors in berlin with afaik no stock vesting. How they even manage to get qualified personnel is beyond me, I would expect much more for a fintech with over 3B evaluation

actually they are a top tier payer in Stockholm

Re: Klarna users are being signed in to random accounts

#207

Does Klarna still do the IQ test as part of their hiring process?

Oh boy this brought back memories for me. I thought that IQ test was screening test, pre-phone interview. But no, they had me redo it at the onsite interview too. The funny part was the onsite test had the exact same questions as pre-phone interview. edit: typo

Maybe to check for cheaters

Re: Klarna users are being signed in to random accounts

#208
I am really really interested in knowing the root cause. I am really concerned by agile, and start-up hipster culture creeping into critical infrastructure companies.

There are so many patterns(event driven, CQRS) in recent microservices architecture, which are gaining popularity and people have been using them without realizing the cons and the need for them.

Re: Klarna users are being signed in to random accounts

#209
post #196

Earlier quoted context omitted.

>They're deliberately trying to get people to take on debt rather than just do card payments So what? It's 0% interest. It's incredibly helpful to have easy-access financing to split purchases across a few months. >even simple things like buying a book through a web site requires declining several offers for paying with credit. This sounds so specific it seems like you're taking a bad experience with one website and…

> So what? It's 0% interest. Debt is slavery and so on. Let's not get too hung up on the fact that I dislike it. > Most e-commerce sites I've used in the past year offer Klarna or some similar service and all of them have been implemented as just another option in a set of radio buttons. Radio buttons is fine. It's the defaults and "are you sure you don't want to pay with credit?" questions I'm bugged out about. I do…

>Debt is slavery and so on.

No it's not, and statements like that trivializes the mistreatment that actual slaves went through.

Re: Klarna users are being signed in to random accounts

#210
post #185

What are the ways you can implement "log in as anyone accidentally"? I'm imagining it was a case of an SQL-based password check where "TRUE OR" got added to the WHERE clause, and the code takes the first result instead of expecting only 0 or 1 row. Are there other easy ways to do this?

1) Caching: a cache is used in front of the API for things like product listings, it uses a pattern match like /api/products/*, and caches routes which match. Someone accidentally configures it to cache /api/*, and thus login responses from /api/session return another recent user session, potentially including the cookie such that subsequent requests are authenticated as that user. 2) Mentioned elsewhere in this thre…

It can be a bug in the application server as well, I recall uwsgi having issues where the request (or response, not sure) dictionaries were recycled between requests, and some corner cases didn't clear those between handling different requests, or something to that tune.
Post reply on HN