Tl;dv: Over 180k meetings left wide open

Post by jjice » Mon, Aug 10, 2026, 2:51 PM UTC

purplemoonx wrote: post #56

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…

Post by QuadmasterXLII » Mon, Aug 10, 2026, 2:52 PM UTC

purplemoonx wrote: post #66

mschuster91 wrote: post #61

Earlier quoted context omitted.

> I digress, the CTO didn't respond because he was more worried about how it would make him look. This industry is dead - the wrong people work in it. The main problem is that the IT industry for a loooooooong time "self-regulated" itself, the only areas that did have regulation had it come in externally (i.e. automotive, aeronautic, astronauts and maritime). Only in the last years, GDPR + insurances forced a bit of…

Idk licensing and regulation sounds like involving more institutional arrogance. We effectively have that kind of gatekeeping now with the University degree and University recruiting pipelines (all other candidates are "external" and illegally deprioritized but it's somehow allowed). The CTO shouldn't have to pay, the company should. And then maybe they will be incentivized to hire somebody who knows what they're doi…

Post by asdf88990 » Mon, Aug 10, 2026, 2:55 PM UTC

Oras wrote: post #14

Not the first time I read a shitty implementation with Firebase, I'm not blaming the platform, but seems there is a huge skill issues around it. Wasn't a dating app exposed this year with same negligence or firebase security?

Post by purplemoonx » Mon, Aug 10, 2026, 2:57 PM UTC

jjice wrote: post #71

purplemoonx wrote: post #56

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…

I was at a much smaller YC company when I found that AWS root credentials were checked into the repo, purely for S3 file uploads for logos. When other engineers and I brought it to the CEO (he required infrastructure stuff get brought up to him first), he handled it with zero urgency and didn't see why it was a big deal. I explained to him how the EC2 instances would assume the role that already had the permission an…

Post by ThrowawayTestr » Mon, Aug 10, 2026, 3:03 PM UTC

purplemoonx wrote: post #56

It's hilarious how these companies handle security breaches. I once reported superadmin user/pass committed to github at a major YC backed background check company I worked at and everyone tried to make it seem like it was my fault . I had just started working there and found it in the first week. Anyway, had to show that it was committed by their main Staff engineer 2 years before I even worked there. For 2 years ev…