Live data from Hacker News

Notion leaks email addresses of all editors of any public page

twitter.com

71–80 of 162 posts

Re: Notion leaks email addresses of all editors of any public page

#72
post #67

Earlier quoted context omitted.

I'm guessing it's not trivial to fix without breaking other things? The weakness seems to be that anyone can turn UUIDs into details like email. But I assume this functionality is necessary for other flows so they can't just turn off all UUID->email/profile look ups. And similarly hiding author UUIDs on posts also isn't trivial. Conceptually, I agree it should be easy, but I suspect they're stuck with legacy code and…

Of course they can fix it, come on. They can easily withold information they put out intenionally.

The whole point of that comment is that it's not that easy. There are potential side effects and consequences that are difficult to architect around.

Re: Notion leaks email addresses of all editors of any public page

#73

Earlier quoted context omitted.

Interesting that people immediately think of workarounds instead of rejecting the governments and corporations behind the thing. Year by year Overton Window moves, workarounds become more and more involved and eventually people will give up and become just living datapoints on corporate/government dashboard.

Rejecting the government is insurrection, it's the same as becoming a terrorist.

You are called terrorist only until you win then you are a freedom fighter.

You even may be called freedom fighter from the start if you are trying to displace government in the right country. There are plenty of examples.

Re: Notion leaks email addresses of all editors of any public page

#74

Earlier quoted context omitted.

Interesting that people immediately think of workarounds instead of rejecting the governments and corporations behind the thing. Year by year Overton Window moves, workarounds become more and more involved and eventually people will give up and become just living datapoints on corporate/government dashboard.

Rejecting the government is insurrection, it's the same as becoming a terrorist.

Learn about the origin of word terrorism (hint: it was term for rogue government acting against its peoples)

Re: Notion leaks email addresses of all editors of any public page

#75
Hi, this is Max from Notion.

First: This is documented and we also warn users when they publish a page. But, that’s not good enough!

Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits.

P.S: Some folks here have speculated that this should be a 1 minute fix. Unfortunately that is not the case. :(

Re: Notion leaks email addresses of all editors of any public page

#76
post #33
post #2

Big companys need to start caring more security and privacy of its users and employees

People need to start voting in politicians who will meaningfully punish corporations who don't.

So not sure where you are from, but over here both main parties and almost all press and TV would viciously push back (and actually are trying to do it right now with another party).

The reason for it is very simple: big companies bribe politicians and.... buy ads in media.

Re: Notion leaks email addresses of all editors of any public page

#77

Hi, this is Max from Notion. First: This is documented and we also warn users when they publish a page. But, that’s not good enough! Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits. P.S: Some folks here have speculated that this should be a 1 minute…

Considering it was reported in 2022, and it is obviously an error, I don't think it is unfair for people here to have expected it to be fixed by now since it was first reported.

Re: Notion leaks email addresses of all editors of any public page

#79

Hi, this is Max from Notion. First: This is documented and we also warn users when they publish a page. But, that’s not good enough! Second: We don’t like this and are looking at ways to fix this either by removing the PII from the public endpoints or by replacing it with an email proxy similar to GitHub’s equivalent functionality for public commits. P.S: Some folks here have speculated that this should be a 1 minute…

Considering it was reported in 2022, and it is obviously an error, I don't think it is unfair for people here to have expected it to be fixed by now since it was first reported.

I agree. We will do better.

Re: Notion leaks email addresses of all editors of any public page

#80

Earlier quoted context omitted.

Rejecting the government is insurrection, it's the same as becoming a terrorist.

A terrorist works with terror (fear). Also at least in democracies you can reject the government without physical violence.

> in democracies you can reject the government

No, you cannot. You can reject the current party, but the government is much more than that. In the US, for example, the government is a set of institutions that were put in power in the American revolution. If you try to reject this your own life is at risk.

Post reply on HN