Timeline for A deeper dive into the May 2019 security incident: blog post feedback
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 26, 2021 at 2:22 | comment | added | Makoto | Somewhat understandable. Lesson learned to code as if everyone is the thief - even those who you have appointed a great deal of privilege. | |
| Jan 25, 2021 at 23:28 | comment | added | Dean Ward StaffMod | It literally rendered the email template with an actual model to show a CM what the user would see, at the time it was written I imagine nobody thought it’d be used for nefarious purposes. After all CMs and devs have very high level privileges, what would an account takeover achieve? I’m unsure if this was dev only - Shog details some of the history over on Hackernews and that seems to indicate it was used for support purposes by CMs, so I suspect, yes, this was on prod at some point. | |
| Jan 25, 2021 at 23:15 | history | answered | Makoto | CC BY-SA 4.0 |