Postman users are probably leaking their secrets to Postman's hosted servers

Posted by jonthepirate on Wednesday September 08, 2021 @01:30AM
from the self-post dept.

I suspect most people who use recent versions of Postman might not realize there's a new "sync" feature that seems to upload all of your HTTP request configurations to Postman's hosted servers. That leads me to believe that if Postman gets hacked, that will probably cause a wave of data breaches which seem imminent.

( 4 comments | 15 points | on HN )

Re:Postman users are probably leaking their secrets to Postm... by weastur on Thursday September 09, 2021 @02:24AM (#28466900)

Just use "offline" tools like httpie. Pretty good interface. My experience suggests that a relatively small number of engineers need to work with more than 5-10 requests at a time. So you can just store commands in some text file or just using shell history search.

[ Parent | on HN ]

Re:Postman users are probably leaking their secrets to Postm... by fhaldridge7 on Thursday September 09, 2021 @10:35PM (#28477154)

I've stopped using postman because they were pushing too hard for their paid plan. Now I'm using https://insomnia.rest/

[ Parent | on HN ]

Re:Postman users are probably leaking their secrets to Postm... by dyme13 on Wednesday September 08, 2021 @02:27PM (#28461170)

Hasn't sync been around since 2015? https://blog.postman.com/postman-2-0-with-sync-is-here/

This is not a new problem with recent versions - it's always been a problem as far as I can tell.

[ Parent | on HN ]

Re:Postman users are probably leaking their secrets to Postm... by Graffur on Friday September 10, 2021 @06:03PM (#28487414)

The whole cloud product part of Postman is so useless. Does anyone recommend another similar service?

[ Parent | on HN ]