Why debug mode is not good for production (clear-text password)

carbonhire.com

10 points·ziodave··10 comments

Did anyone else receive spam from an app called "Sway" and get this page? This happened to three employees where I work and we were all very confused as to why it was referencing people at our company.

I also got mail from Sway, as many other on twitter. What isn't clear is why the link pointed to carbonhire.

Did the Sway mailing list got hacked in some way etc? I wonder.

http://twitter.com/bos31337/status/451429219881324544/photo/... shows their database username as "geniushire" which looks like a recruiting platform owned by CarbonHire (http://www.geniushire.com/).

Might be two startups from the same team, or more nefariously, maybe it's a dating app that's a front for a recruiter's data collection.

Got an email from Sway wasn't sure where it was from. The email address was my github email address tho...

Yep. Interestingly, the company name was correct, but the email was one of my personal emails...

Not mentioned is them directly referencing a specific AWS instance by name rather than via DNS alias, which also highlights how it's amateur hour over there.

It brings up a side point in how amateur hour it is everywhere in the dating space - Tinder's amazing lack of even basic security for example.

Is everyone just terrible at this or are my expectations just too high?

They appear to have turned the URL off.

http://twitter.com/bos31337/status/451429219881324544/photo/... has a photo of it.

Posts like this is why Hacker News needs a downvote button. Or better moderators.

Yes, especially for comments like this.

HN does have a downvote ("flag") button.

Reply on news.ycombinator.com