Twenty five thousand dollars of funny money

Re:Twenty five thousand dollars of funny money by richard_mcp on Saturday December 03, 2022 @11:42AM (#33844762)

I'm confused how this was able to give out money before the new code was submitted to production. The author claims that both she and her coworker tested it before the code was submitted and they ended up with the extra $25k. Was this code only executed on the front end? Were there no checks in the backend to prevent employees from just pulling out whatever money they wanted?

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by dmix on Saturday December 03, 2022 @11:57AM (#33844904)

The way she said it ‘crashed’ and you could just reload the page, and that it was frontend work also points to browser js code?

So yeah I’m curious how that worked too.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by justinator on Saturday December 03, 2022 @12:15PM (#33845093)

Local was front end stuff, back end was still talking to production.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by kleinsch on Saturday December 03, 2022 @12:05PM (#33844971)

For some systems in that environment, the back-end for dev was actual production. Keep in mind that wasn’t handing out actual money, it was creating ads credit.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by hk__2 on Saturday December 03, 2022 @12:04PM (#33844961)

As I understand it the code gave you $25k credit, not $25k actual money.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by tartoran on Saturday December 03, 2022 @12:14PM (#33845077)

Yeah but you missed the funny part in front of money.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by rockinghigh on Saturday December 03, 2022 @01:03PM (#33845660)

As I understand, the frontend and backend code run in a development environment but the funds available were stored in a production database.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by adamsb6 on Saturday December 03, 2022 @01:40PM (#33846042)

The way that things work at this particular company is that you typically test changes in this codebase on your dev machine, but usually the dev machine talks to a prod database.

The prod database is too large to practically have a second copy sitting around for testing. Also, if you tested on some pristine small test database you're going to end up missing bugs that would only manifest with actual prod data.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by namrog84 on Saturday December 03, 2022 @03:59PM (#33847289)

I get it but that just seems really dangerous. I hope they have a lot of guard rails and roll back support or something.

[ Parent | on HN ]

Re:Twenty five thousand dollars of funny money by adamsb6 on Sunday December 04, 2022 @09:08PM (#33860551)

They do. Feature flags are part of the culture, you'll typically gate in a very small set of objects that could initially receive any new treatment.

[ Parent | on HN ]