Earlier quoted context omitted.
not only that, but they aren't a great predictor of actual job performance
Depends on the job actually. (I know this will be unpopular but in my experience hiring for certain roles it is correlated)
[deleted]
Klarna users are being signed in to random accounts
441–450 of 517 posts
Re: Klarna users are being signed in to random accounts
#442Klarna is no stranger to criminally lax attitude towards data privacy and security. In Finland, they implemented a checkout flow based only on your SSN (personal ID number). By simply entering someone else's SSN (which is not hard to guess/pry) you can reveal anyone's official home address. Further, they enable a "pay later by invoice" checkout flow, again by just knowing someone's SSN. Scammers use this to order ite…
I am not sure this makes sense. Shouldn't Klarna provide proof of the transaction to the court? Won't the court look at it and throw it out as baseless?
If Klarna were actually on the hook for their own money, it wold only have to happen a few times before they realize it's not worth it. edit: definitely not a finnish lawyer
Re: Klarna users are being signed in to random accounts
#443Klarna is no stranger to criminally lax attitude towards data privacy and security. In Finland, they implemented a checkout flow based only on your SSN (personal ID number). By simply entering someone else's SSN (which is not hard to guess/pry) you can reveal anyone's official home address. Further, they enable a "pay later by invoice" checkout flow, again by just knowing someone's SSN. Scammers use this to order ite…
In Sweden you can ask them to require Mobilt BankID confirmation to every buy, their competitors (like qliro) don't have that yet so Klarna are only half bastards. But they did get a lot of criticism from the Swedish government about the same things you have presented.
Qliro has that too, which I know since somebody bought shoes with my SSN. I don't know if it's a general feature or if you have to contact them, but the functionality is implemented at least.
Re: Klarna users are being signed in to random accounts
#444Earlier quoted context omitted.
This is exactly why these IQ-test companies make so much money. It gives out yeses and no:s confirmation bias does the rest. Quickly why they don't work: You create a huge chain correlational assumptions. First that visual-spatial tasks of this kind predict performance on visual tasks. 2. That performance on visual tasks predict general intelligence (whatever that is). 3. That this notion of general intelligence (whi…
Right - and the general intelligence thing is funny too because all of these companies want to hire specialists in some area, not generally intelligent people.
You are making assumptions here that are incorrect. I use it when hiring virtual assistants. They don't need a specific skill.
Re: Klarna users are being signed in to random accounts
#445Ha, one time I was debugging an issue that only happened to a particular user. Lazy as I was, I hardcoded his auth token in the code "just to test". Having found the bug quickly, I was excited and did not realize I checked-in the auth token too. Bypassed reviews, pushed to prod and then reports started coming in "Hey, users are saying they are all logged in to this random guy's account". Lessons learned the hard way…
Did you compensate the victim of your personal and corporate negligence?
Re: Klarna users are being signed in to random accounts
#446At a large site I used to work for circa 2011, before everyone had gone fully HTTPS, we received similar panicked reports from users: "I'm logged in as someone else!" Turns out an ISP in the Philippines decided to just ignore `cache-control` and `vary` headers and forcibly started caching logged-in responses along with auth cookies. Bad times. Made it clear to me why the whole web would have to go HTTPS.
Yeah but what about the saved traffic? Think of the poor routers that have to do all this transferring job.
Re: Klarna users are being signed in to random accounts
#447Re: Klarna users are being signed in to random accounts
#448Klarna is no stranger to criminally lax attitude towards data privacy and security. In Finland, they implemented a checkout flow based only on your SSN (personal ID number). By simply entering someone else's SSN (which is not hard to guess/pry) you can reveal anyone's official home address. Further, they enable a "pay later by invoice" checkout flow, again by just knowing someone's SSN. Scammers use this to order ite…
This reminds me of this BBC article I came across: https://www.bbc.co.uk/news/business-55829879
> To use Klarna's pay later service, which defers payments for up to 30 days, shoppers only have to provide a name, email, date of birth, mobile number and billing address.
It’s mind blowing that’s all the information you need to process a payment via Klarna.
Re: Klarna users are being signed in to random accounts
#449As a software engineer, I hate when I add a check for something "that will never happen" but that if happens is awful, and people complain. A classic example: you need to get a user from a session, check against a database, and continue if they're signed in. Then I add a simple if databaseUser.Username != form.Username and people will say "if that happens we've something worse wrong". Geez, something might be wrong a…
Klarna uses erlang and erlang enforces exhaustive conditionals and pattern matching so the error / unsupported case is always handled.
Re: Klarna users are being signed in to random accounts
#450Here's their official statement: https://www.klarna.com/uk/blog/written-statement-on-app-bug/ Although I dunno about "According to GDPR standards, only non-sensitive data was exposed." since in the twitter thread someone said: This is definitely not a test environment. I was called by someone who was logged in to my account and saw all my personal data including bank details, Klarna card etc. And while I'm told the b…
And this is both maddening AND make the problem worse (from the CEO): "We are truly sorry for any inconvenience..."
Oof, yes, its not about inconvenience...