News for hackers. Stuff that matters.

nathanmock

Re:A former Uber engineer's disaster story on Thursday December 10, 2020 @07:26PM (#25380734)
Fun fact: I was able to access a bunch of employee admin screens in early 2015 because of the client side architecture of the app. I noticed around a year later the architecture had changed and always wondered if my article had a role in the transition

http://nathanmock.com/archives/how-i-accessed-employee-setti...

Re:Introducing MetaReader – MetaFilter iOS Client on Monday March 16, 2015 @01:47PM (#9212996)
OP here, 10 free promo codes! http://redeemco.com/g/metareader_8jmx/ Thanks for your feedback!
Re:YC/HN Meetup in Austin, March 27th on Thursday March 05, 2015 @10:17PM (#9155397)
Wish this was during SXSW!
This is a good point, but there should be more awareness towards the issue as a whole. I've seen many apps who expose data dangerously. Some developers may not be aware that these values are exposed (even with SSL), so they should architect their apps accordingly, reinforcing the fact that you should never trust the client. I also briefly touch on the fact about this dynamic architecture and some of the implications it brings.
I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
Re:How I Accessed Employee Settings on Uber on Friday February 27, 2015 @04:32PM (#9121491)
Author here: I was able to access employee settings for Uber Technologies, not just employee driver settings.
Re:For $45 Per Month, All the Coffee You Can Drink on Wednesday April 16, 2014 @09:56AM (#7597747)
What's to stop me from buying coffee for all my friends as well?
Re:Retrieve info about artists/play mixes on Sunday January 20, 2013 @09:24PM (#5089479)
This is my first open source iOS app. Completed in about 8 hours. Would love to get your feedback. Looking forward to your contributions. Enjoy!
Good observation, now that's attention to detail!