Live data from Hacker News

Klarna users are being signed in to random accounts

twitter.com

371–380 of 517 posts

Re: Klarna users are being signed in to random accounts

#371
post #364
post #284

Earlier quoted context omitted.

...which is why it's important to design things to fail safely . That "worst result" needs to be minimized by design .

With nuclear .. that's probably a bit difficult

There are much-safer-by-design reactor plans out there now. Hopefully the "nuclear is horribly unsafe by default" opinions will consider the new options.

Re: Klarna users are being signed in to random accounts

#372

Does Klarna still do the IQ test as part of their hiring process?

Doesn't almost everybody? I mean let's get real here, what's the IQ distribution at FAANG or any other competitive software engineering company?

There may not be an explicit "IQ" portion to the process, or a hard number, but they are absolutely filtering on intelligence. An uncomfortable aspect of our society that I'm both surprised and not surprised doesn't get talked about much.

Re: Klarna users are being signed in to random accounts

#373
post #310

Earlier quoted context omitted.

I worked with a team that owned a service that resizes images. An engineer was assigned a task to add support for auto rotating images. His solution involved saving the image to a file and then using a library to handle the rotation. He used a hardcoded value for the file name. In a local environment where requests are sparse this looked fine to him and other engineers on the team missed it in code reviews. It wasn't…

"An engineer was assigned" Nope. That definitely wasn't an engineer.

Real software engineers don't make mistakes?

Re: Klarna users are being signed in to random accounts

#375
post #225

I'm just guessing, but... "developer gets a great idea - let's push an update to the API as a GET request so we can cache this on the CDN... forgetting that the JWT token is potentially returned in the call. Now, whoever makes the call first gets their JWT token stored for everyone else to load instead when the API call is made." Ta-da, Klarna.

Years ago I added varnish in front of a website to cache image requests, not realizing that if the response included 'set-cookie' that was also cached. We immediately started getting reports of random products appearing in our customers' shopping carts, as people's sessions got merged with random strangers.

Just feel the urge to point out that Varnish by default do specifically not cache requests with a set-cookie header. :)

Re: Klarna users are being signed in to random accounts

#376

Lots of times when I’ve been buying things in e-shops I’ve been offered to pay using Klarna as a payment broker. But doing so has always been more confusing for me compared to “regular” payments with a credit card anywhere else, and has on overall been a negative experience for me. I really don’t understand why anyone would prefer to use them at all. What am I missing? Can anyone help me understand?

When I buy things (Sweden) it’s basically one-click checkout with just the e-ID signing to pay directly from my account, not via card. Definitely convenient.

Re: Klarna users are being signed in to random accounts

#377
post #341

Earlier quoted context omitted.

True, but it's still always possible to get an answer to a question—you just have to ask. However, we might not see it unless you ask at hn@ycombinator.com.

I don't want to appear ungrateful - let me take this opportunity to thank you sincerely for all that you do. Your set up appears to work, and I'm probably in a minority with my demands. We wouldn't have to ask if you had a public mod log (and banned sites list etc) and a public explanation of the algos that power HN. Your comment reminds me of hotels - "X is available, just ask". A scheme clearly designed to reduce u…

The moderator comments are a kind of public mod log and a thing worth looking at regularly if you're interested in how and why HN is moderated.

Re: Klarna users are being signed in to random accounts

#378

Does Klarna still do the IQ test as part of their hiring process?

tangential thought, but related: I am, in general, a proponent of nuclear energy as a green alternative to whatever the hell we are doing today. But when I see such stories that humans manage to fuck up simple payment processing apps, still make errors while maintaining bridges, still manage to do hugely negligent screw-ups (most likely corrupt) in *cable cars maintenance*, I immediately think that it is imminent, th…

In fairness, the government does not watch over your shoulder if you write code for payment apps. Nuclear energy oversight is so over-the-top, it's almost not worth doing it.

Re: Klarna users are being signed in to random accounts

#379
post #65

> Hear hear, I used Klarna (not by choice) It was by choice. You weren't born with an account. Not taking personal responsibility for the rise of the ubiquity of these terrible online services (WhatsApp users, I'm looking at you) is a huge part of the problem. Pretending that you didn't opt-in is a lie you've told yourself; you shouldn't propagate that lie to others in society.

It at least used to be very easy to accidentally sign up for Klarna, thinking you're just paying by card.

Klarna are the masters of dark UI patterns.

Re: Klarna users are being signed in to random accounts

#380
post #377

Earlier quoted context omitted.

I don't want to appear ungrateful - let me take this opportunity to thank you sincerely for all that you do. Your set up appears to work, and I'm probably in a minority with my demands. We wouldn't have to ask if you had a public mod log (and banned sites list etc) and a public explanation of the algos that power HN. Your comment reminds me of hotels - "X is available, just ask". A scheme clearly designed to reduce u…

The moderator comments are a kind of public mod log and a thing worth looking at regularly if you're interested in how and why HN is moderated.

Are you being serious?
Post reply on HN