Live data from Hacker News

Tell HN: Fiverr left customer files public and searchable

news.ycombinator.com

51–60 of 252 posts

Re: Tell HN: Fiverr left customer files public and searchable

#52

This is crazy! So many tax and other financial forms out in the open. But the most interesting file I’ve seen so far seems to be a book draft titled “HOOD NIGGA AFFIRMATIONS: A Collection of Affirming Anecdotes for Hood Niggas Everywhere”. I made it to page 27 out of 63.

I dunno, page 27 is where it started getting good. I actually have to admit I like this guy's relentless positivity and he actually spent real money to pay someone via Fiverr to typeset it, edit it, etc. for him.

Re: Tell HN: Fiverr left customer files public and searchable

#53
post #28

Earlier quoted context omitted.

How does someone's dating site password end up in Fiverr?

it's worse than you think – it's an admin password to the ~whole site~

Oh my. I feel for the tech team at fiverr. I'm sure it's nasty in there. Sending virtual hugs.

Re: Tell HN: Fiverr left customer files public and searchable

#54

it's been 5 hours. even manual action to take down the most sensitive files should have completed about 3 hours ago at most. what is happening.

I've never been in the position that I've had to deal with this. Is the best you can do in this situation to pull the files and optionally republish them to a robots.txt'd path (with authn/z, too)? I can't imagine you can get it pulled from search engines very quickly...

Re: Tell HN: Fiverr left customer files public and searchable

#55

This is crazy! So many tax and other financial forms out in the open. But the most interesting file I’ve seen so far seems to be a book draft titled “HOOD NIGGA AFFIRMATIONS: A Collection of Affirming Anecdotes for Hood Niggas Everywhere”. I made it to page 27 out of 63.

after reading it, it's super positive and really great. I wouldn't consider myself the target audience for this, but ill probably work it into my morning practice a little for a couple weeks.

Re: Tell HN: Fiverr left customer files public and searchable

#56
post #44
post #36

Earlier quoted context omitted.

Teachers have to be licensed and keep up on licensing. Plumbers. Electricians. Lawyers. Doctors. Hell, I have to get a license to run my own business. Why shouldn't software come with a branch for licenses if you're working with sensitive data?

We're going the other way: now any random vibe coded slop is the norm.

Normalize "vibe-plumbing"

Re: Tell HN: Fiverr left customer files public and searchable

#58

Software development jobs are too accessible. Jobs with access to/control over millions of people's data should require some kind of genuine software engineering certification, and there should be business-cratering fines for something as egregious as completely ignoring security reports. It is ridiculous how we've completely normalised leaks like this on a weekly or almost-daily basis.

> should require some kind of genuine software engineering certification

Wouldn't change a thing, other than add another hassle you have to pay for to do your job.

This is the result of carelessness, not someone who didn't know that private data should be private because they weren't certified.

Re: Tell HN: Fiverr left customer files public and searchable

#60
post #44

Earlier quoted context omitted.

We're going the other way: now any random vibe coded slop is the norm.

Normalize "vibe-plumbing"

Both plumbing and wiring are “easier” in a way than programming-as they’ll violently and potentially explosively let you know if you messed up; whereas programming lets you be blissfully unaware until you see your data plastered across the nightly news.
Post reply on HN