Hacker News Reader

Having an endpoint that can just delete… everything seems kinda risky.

It is interesting they have all that architecture and an endpoint that can just delete everything.

It's an ElasticSearch endpoint that automatically comes with every index. I'm not even sure if there's a way to disable. Maybe some sort of auth.

That’s wild to me. Seems like an accident(s) waiting to happen.