I've seen this happen when Cloudflare caching is misconfigured.
Klarna users are being signed in to random accounts
361–370 of 517 posts
Re: Klarna users are being signed in to random accounts
#362Earlier quoted context omitted.
I needed to buy things, because that is life, and the merchant only offered Klarna. You might want to reconsider your hostile rhetoric, it does not come across well.
It's not hostile, it's just the truth.
Those things are not mutually exclusive? You can say to someone "I want to punch you", and that can both be the truth and hostile.
...and yes, you're being extremely hostile. There's a reason you got banned off of that other site...
Re: Klarna users are being signed in to random accounts
#363Klarna is a weird company. Last I interacted with them it was clear that they are completely designed to operate within Sweden, but have no idea of how to deal with the outside world. Maybe that have changed. I talked to Klarna maybe 10 years ago. One of the things I wanted to know was how they dealt with abuse in Sweden, given you just need the social security number of a person and then you can do purchase as that…
typiskt danskt att skicka massa knullsaker
Naive, dejlige svenskere.
Re: Klarna users are being signed in to random accounts
#364Earlier quoted context omitted.
Yes! We will always make huge mistakes. .. so we need to accept the eventuality that the worst result will eventually occur.
...which is why it's important to design things to fail safely . That "worst result" needs to be minimized by design .
With nuclear .. that's probably a bit difficult
Re: Klarna users are being signed in to random accounts
#365I'm just guessing, but... "developer gets a great idea - let's push an update to the API as a GET request so we can cache this on the CDN... forgetting that the JWT token is potentially returned in the call. Now, whoever makes the call first gets their JWT token stored for everyone else to load instead when the API call is made." Ta-da, Klarna.
I doubt that Klarna, a bank, have OSI layer 7 proxies in the cloud, with TLS termination in their CDN solution, on AWS. I would assume this traffic is outside of that. But then again, I know they wasted 25M+ Euros on a garbage NodeJS platform. They also created an own cloud once. Yes, it is in the trash bin.
Surprisingly many IT companies tried to create their own clouds, or at least their own kubernetes.
Re: Klarna users are being signed in to random accounts
#366> Hear hear, I used Klarna (not by choice) It was by choice. You weren't born with an account. Not taking personal responsibility for the rise of the ubiquity of these terrible online services (WhatsApp users, I'm looking at you) is a huge part of the problem. Pretending that you didn't opt-in is a lie you've told yourself; you shouldn't propagate that lie to others in society.
This comes across as "If you haven't read every word of all the terms of use, privacy policy, and any other legal documents of not only the initial company you interacted with, but of all their second party companies, and their services, and their services, until you've researched the entire chain of partners who could potentially have something to do with your transaction, then you are obviously complicit in everything all those companies chose to do and you have no grounds for complaint."
While you may be literally true, the reality of this economic situation is full of far more gray area than you allow for.
If this confrontational, extrermist position is intended to try and wake people up to all this, I fear your message is outweighed by your snark.
And if you don't care about that, then I've wasted as much of my breath as you have yours.
Re: Klarna users are being signed in to random accounts
#367I'm just guessing, but... "developer gets a great idea - let's push an update to the API as a GET request so we can cache this on the CDN... forgetting that the JWT token is potentially returned in the call. Now, whoever makes the call first gets their JWT token stored for everyone else to load instead when the API call is made." Ta-da, Klarna.
I worked with a team that owned a service that resizes images. An engineer was assigned a task to add support for auto rotating images. His solution involved saving the image to a file and then using a library to handle the rotation. He used a hardcoded value for the file name. In a local environment where requests are sparse this looked fine to him and other engineers on the team missed it in code reviews. It wasn't…
"An engineer was assigned"
Nope. That definitely wasn't an engineer.
Re: Klarna users are being signed in to random accounts
#368Earlier quoted context omitted.
I'm afraid you don't decide what comes across as hostile. Things can be discussed in many ways, yours is one of assuming to hold all the answers in a conversation with a stranger you know very little about. I would reconsider this. You don't know what I was buying, for what reason, or if there was a realistic alternative. You just say "you weren't born with it", and "it's the truth". An unconvincing way to argue what…
If you find truthful and accurate statements of fact to be hostile, I don't know what to tell you, other than perhaps clarifying that I wasn't intending to be convincing or persuasive. Those that care about the truth will be persuaded sufficiently by facts, and everyone outside of those that care about the truth I am not interested in spending any effort persuading.
Unfortunately, being an asshole tends to outweigh being correct in conversation. Maybe work on those social skills, bud.
Re: Klarna users are being signed in to random accounts
#369Klarna is a weird company. Last I interacted with them it was clear that they are completely designed to operate within Sweden, but have no idea of how to deal with the outside world. Maybe that have changed. I talked to Klarna maybe 10 years ago. One of the things I wanted to know was how they dealt with abuse in Sweden, given you just need the social security number of a person and then you can do purchase as that…
> "Why would anyone do that?" That's such a typical Swedish answer... but they do allow (but not as default!) to block orders and request digital confirmation
Of course, Sweden's largest export are lessons about morality.
Interesting for a country that slowly eradicates their indigenous people btw.
https://en.wikipedia.org/wiki/S%C3%A1mi_people#Discriminatio...
https://en.wikipedia.org/wiki/Swedification#Swedification_of...
Re: Klarna users are being signed in to random accounts
#370> Hear hear, I used Klarna (not by choice) It was by choice. You weren't born with an account. Not taking personal responsibility for the rise of the ubiquity of these terrible online services (WhatsApp users, I'm looking at you) is a huge part of the problem. Pretending that you didn't opt-in is a lie you've told yourself; you shouldn't propagate that lie to others in society.
> You weren't born with an account. A merchant I shopped at, and paid in full by card, opened an account for me and shared line item details with Klarna, apparently because they are using them as their payments processor in addition to an installment payment option. I noticed this when I later did in fact "open" an (or rather, claim an existing) account with them. Very disturbing, and the bad aftertaste has never ful…
Same thing happened to me when buying a graphics card from a computer parts website. Klarna was so well integrated into the UI of the checkout process that I didn't even notice I was giving my details to them.
Only afterwards I noticed on my bank statement. I sent them a gdpr request to delete my data.