News for hackers. Stuff that matters.
Re:BrowserStack was hacked by globile on Sunday November 09, 2014 @09:06PM (#8581707)
Regarding some of the actual claims, I had an issue a year back when I logged into a session, and could perfectly see another user's session in progress, internal url in the browser, mouse moving around.

I freaked out, watched for 3-4 seconds, and then got kicked out of the session.

I opened a ticket with support, and they got back to me saying they had "fixed the root cause".

I still use browserstack, but I'm really careful with passing along private credentials.

Re:BrowserStack was hacked by geographomics on Sunday November 09, 2014 @09:25PM (#8581752)
I've encountered similar oddities, seeing the remnants of other users' sessions, but no mouse movements so I guess they'd been recently terminated.

Also the VMs aren't locked down as tightly as they ought to be, last time I poked around in the Windows ones there were a few folders left writeable that shouldn't have been, ones with executables and scripts in used to control it.

That said, their service is so very useful that I continued using them anyway. My use case is just to occasionally check some public-facing websites are rendering properly on various browsers, so no big deal if someone snoops on that.

Re:BrowserStack was hacked by globile on Sunday November 09, 2014 @09:42PM (#8581795)
I really saw mouse movement and url typing, even though it was only a few seconds.

I raised the issue with them back in July 2013, but was initially brushed off. A couple more aggressive emails and they finally responded after 2 weeks saying the issue had been solved.

Haven't had problems since, but still wary..

Re:BrowserStack was hacked by geographomics on Sunday November 09, 2014 @09:47PM (#8581810)
Sorry I didn't mean to sound like I was doubting your account, was intended as a confirmation of your sightings!

It's just as probable that I connected in while the users were idling.

Re:BrowserStack was hacked by globile on Sunday November 09, 2014 @09:56PM (#8581832)
No worries! Just pointing out the fact that they didn't seem too worried about the issue when first notified, and I really had to press to get some attention.

Pity I wasn't fast on a screen capture!

Re:BrowserStack was hacked by czottmann on Monday November 10, 2014 @03:21AM (#8582517)
Same here, in Nov 2011. I contacted support, told them about it, and cancelled my account/sub right away back then -- I was using Browserstack for developing client sites and applications, and didn't feel like getting sued over a service I am using potentially leaking sensitive information.
Re:BrowserStack was hacked by hijinks on Monday November 10, 2014 @12:12AM (#8582124)
that happened to customers at a company I worked for. Turned out to be awful handling of threading in a rails app caused sessions to get mixed up.
Re:BrowserStack was hacked by aagha on Sunday November 09, 2014 @11:27PM (#8582012)
Is there a good browserstack alternative?
Re:BrowserStack was hacked by q4 on Monday November 10, 2014 @03:42AM (#8582551)
The only other 2 I could think of is SauceLabs and Rainforest QA.
Re:BrowserStack was hacked by chanux on Monday November 10, 2014 @12:07AM (#8582112)
I think browserling is a similar service.

browserling.com

Re:BrowserStack was hacked by vaidik on Monday November 10, 2014 @12:12AM (#8582123)
Good. Probably no. But there is Saucelabs.
Re:BrowserStack was hacked by bybjorn on Monday November 10, 2014 @05:03AM (#8582753)
There is, actually; Crossbrowsertesting.com .. it's good.