News for hackers. Stuff that matters.

A comment on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript. Parent comment

Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by g48ywsJk6w48 on Sunday April 26, 2026 @10:03AM (#47910441)
Would you like me to show you specific JavaScript files right here?
[ Parent | on HN ]
Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by thom-gtdp on Sunday April 26, 2026 @10:51AM (#47910811)
Yes please, I only checked the ones from homepage, I probably missed some if the other pages includes other scripts
[ Parent | on HN ]
Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by g48ywsJk6w48 on Sunday April 26, 2026 @01:13PM (#47911932)
Just open app.medvi.org and search in DevTools gmail/yahoo/icloud and you will see js bundle with emails.

or seasonhealth/openloophealth to find another js bundle with staff emails.

[ Parent | on HN ]
Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by thom-gtdp on Sunday April 26, 2026 @01:55PM (#47912311)
Mamma Mia I see them! Crazy 1018 customer mails addresses at first sight
[ Parent | on HN ]
Re:Tell HN: Medvi (telehealth) hardcodes 999 patient emails ... by g48ywsJk6w48 on Sunday April 26, 2026 @02:24PM (#47912560)
Yes, and it's a company that makes hundreds of millions of dollars a year.
[ Parent | on HN ]