News for hackers. Stuff that matters.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by 5tormTrooper on Wednesday August 17, 2022 @03:57AM (#32493563)
Somewhere a junior is sweating buckets.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by woevdbz on Wednesday August 17, 2022 @04:04AM (#32493614)
Maybe. But given the culture at most of these places I'd expect the junior to be explained that it's ok, everybody makes mistakes. Some engineering manager is probably sweating bigger buckets over their failure to properly secure casual human access to prod stuff, which is definitely not ok. Meanwhile the both of them are really really relieved that the notification contents were completely innocuous and not some sick inside joke that would have been massively offensive out of context.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by TheAceOfHearts on Wednesday August 17, 2022 @04:13AM (#32493685)
The only cause for outrage would be if someone got fired for what appears to be an honest mistake.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by joper90 on Wednesday August 17, 2022 @04:16AM (#32493704)
Unless its the CIO/CSO for shite secret management policies.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by joper90 on Wednesday August 17, 2022 @04:00AM (#32493580)
No, the process failed. They should NOT have access to prod API keys.. It actually shows how ABnB treats security of prod secrets.
Re:Airbnb on Android just send a “Test, Test dev" push notif... by esprehn on Wednesday August 17, 2022 @08:14PM (#32503559)
Access to a web app that can send push notifications to all users is not access to prod secrets.