Re:Microsoft Account's OAuth tokens leaking via open redirec...
by lukevp on Sunday October 22, 2023 @01:19PM
(#37977233)
I can’t tell if you love it or hate it… is this sarcastic?
Re:Microsoft Account's OAuth tokens leaking via open redirec...
by astrostl on Sunday October 22, 2023 @01:20PM
(#37977250)
I wouldn't say that I love or hate it. The post definitely isn't sarcastic. What part(s) need more clarity for you?
Re:Microsoft Account's OAuth tokens leaking via open redirec...
by andix on Sunday October 22, 2023 @05:13PM
(#37979143)
I can confirm the quality of their support. My requests were always processed by very qualified people, often within minutes. Some of my feature requests even ended up in their product. Maybe it wasn't because of me, but then they share my ideas of a good time tracker.
Re:Microsoft Account's OAuth tokens leaking via open redirec...
by jorge_leria on Sunday October 22, 2023 @07:05PM
(#37979874)
Thank you for your kind words. I can confirm that our support team is stellar. Despite being a small team, we approach every matter very seriously and I was personally involved in the investigation you referenced. The miscommunication with the reporter on this thread was entirely my oversight (I explained it on the top response) and I'll make sure it won't happen again.
I started getting spammed as a "user of Harvest" which prompted me to suspect that they were selling their customer lists. They took this claim extremely seriously, connecting me with company heads immediately to issue stern denials and execute a prompt investigation. That was great.
What I think it came down to, though, was also engineering. I figured out a rather easy way to reliably infer active customers, which also, "went on the backlog" and remains unfixed months later. And it's a fix that appears to be super trivial.
They also only offer MFA if you're signing in with Google [2]. But the app itself is DAMN good at what it does.
1: https://www.getharvest.com/about/meet-the-team
2: https://support.getharvest.com/hc/en-us/articles/36005266713...