Many Public Salesforce Sites Are Leaking Private Data

Re:Many Public Salesforce Sites Are Leaking Private Data by paxys on Friday April 28, 2023 @12:11PM (#35743269)

Salesforce is impossible to set up by design. The mistake here was that these small businesses and government agencies didn't contract with a Salesforce-preferred ISV charging $250+/hr per consultant to correctly configure it for them.

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by bombcar on Friday April 28, 2023 @12:22PM (#35743459)

Those ISVs charging $250 an hour are the source of lots of the insecurity, because "that makes it work" finally.

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by tomrod on Friday April 28, 2023 @12:13PM (#35743302)

LOL. I wholeheartedly disagree where you place the blame. Broken-by-design means blame lies with Salesforce entirely.

What _other_ major sources of data leaks should we expect from such past performance?

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by aliasxneo on Friday April 28, 2023 @12:17PM (#35743390)

I think there's an inferred /s at the end of the comment you're responding to :)

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by tomrod on Friday April 28, 2023 @12:22PM (#35743462)

I reckon I am the obligatory whoosh of the day :) -- thanks for recontextualizing

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by the_duke on Friday April 28, 2023 @12:49PM (#35743868)

I don't think so.

Considering my experience with Saleforce, I'm quite sure the comment is entirely earnest.

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by Paul-Craft on Friday April 28, 2023 @03:08PM (#35745710)

FYI, I think you mean "implied," rather than "inferred." Remember the difference this way: when someone implies something, that means you may infer that they want you to believe it.

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by evilspammer on Friday April 28, 2023 @10:02PM (#35749320)

Cloudflare and AWS?

[ Parent | on HN ]

Re:Many Public Salesforce Sites Are Leaking Private Data by mym1990 on Friday April 28, 2023 @02:26PM (#35745201)

Well its clearly not impossible since there is a whole industry of professionals doing it successfully for the past 2 decades. Salesforce is difficult to implement because it is extremely customizable and Salesforce is effectively completely hands off. It is not a small business product, and government contracts tend to be a race to the bottom for price, which results in poor quality of development.

[ Parent | on HN ]