Klarna has posted a statement here https://www.klarna.com/uk/blog/written-statement-on-app-bug/
> It’s concluded that a human error caused the bug
I would not want to be that "human" atm
Klarna users are being signed in to random accounts
281–290 of 517 posts
Re: Klarna users are being signed in to random accounts
#282Earlier quoted context omitted.
it's fine to make the check but I hope you don't sweep it under the rug with an early out without at least logging the occurrence
uh? Why would you make the check, find a critical internal inconsistency, and skip logging it? :)
log("this should never happen")
Re: Klarna users are being signed in to random accounts
#283Earlier quoted context omitted.
Why not separate concerns? Crypto currencies work without Proof of Work today.
> Why not separate concerns? Crypto currencies work without Proof of Work today. You mean through proof of stake instead? Yay, now all the people who wanted to avoid having a competent central bank in a free democracy control the money supply get to have the people with the most money control the supply instead. Jesus fucking christ, you cryptocurrency lunatics have lost it.
I don’t necessarily disagree with the sentiment, but HN guidelines demand more constructive disagreements.
Re: Klarna users are being signed in to random accounts
#284Earlier quoted context omitted.
tangential thought, but related: I am, in general, a proponent of nuclear energy as a green alternative to whatever the hell we are doing today. But when I see such stories that humans manage to fuck up simple payment processing apps, still make errors while maintaining bridges, still manage to do hugely negligent screw-ups (most likely corrupt) in *cable cars maintenance*, I immediately think that it is imminent, th…
Yes! We will always make huge mistakes. .. so we need to accept the eventuality that the worst result will eventually occur.
...which is why it's important to design things to fail safely. That "worst result" needs to be minimized by design.
Re: Klarna users are being signed in to random accounts
#285Earlier quoted context omitted.
Depends on the job actually. (I know this will be unpopular but in my experience hiring for certain roles it is correlated)
This is exactly why these IQ-test companies make so much money. It gives out yeses and no:s confirmation bias does the rest. Quickly why they don't work: You create a huge chain correlational assumptions. First that visual-spatial tasks of this kind predict performance on visual tasks. 2. That performance on visual tasks predict general intelligence (whatever that is). 3. That this notion of general intelligence (whi…
Right - and the general intelligence thing is funny too because all of these companies want to hire specialists in some area, not generally intelligent people.
Re: Klarna users are being signed in to random accounts
#286I’m pretty sure this (or something like it) happens at least once to every major site. The stuff of nightmares.
Re: Klarna users are being signed in to random accounts
#287I'm just guessing, but... "developer gets a great idea - let's push an update to the API as a GET request so we can cache this on the CDN... forgetting that the JWT token is potentially returned in the call. Now, whoever makes the call first gets their JWT token stored for everyone else to load instead when the API call is made." Ta-da, Klarna.
[deleted]
Re: Klarna users are being signed in to random accounts
#288Earlier quoted context omitted.
I needed to buy things, because that is life, and the merchant only offered Klarna. You might want to reconsider your hostile rhetoric, it does not come across well.
It's not hostile, it's just the truth.
I'm afraid you don't decide what comes across as hostile. Things can be discussed in many ways, yours is one of assuming to hold all the answers in a conversation with a stranger you know very little about. I would reconsider this. You don't know what I was buying, for what reason, or if there was a realistic alternative. You just say "you weren't born with it", and "it's the truth". An unconvincing way to argue whatever point you actually have.
Re: Klarna users are being signed in to random accounts
#289Having at least authenticated sections of your site use HTTPS was standard well before 2011.
That only protects the user's password. The auth cookie will be sent in all subsequent requests in plain text. EDIT: that's how firesheep ( https://en.wikipedia.org/wiki/Firesheep ) hijacked sessions for e.g.
That's not true. Cookies can have a 'secure' attribute which tells the browser to send them only over TLS
Re: Klarna users are being signed in to random accounts
#290Does Klarna still do the IQ test as part of their hiring process?
We are all mistakes that sometimes make humans.