HNHacker News
TopNewBestAskShowJobs

g48ywsJk6w48

38 karma · joined July 18, 2021

submissionscomments
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
This is not a data leakage. They deliberately included 999 of their customers' email addresses in publicly accessible JavaScript code in order to test certain features on them.
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
I was curious to know which service provider they use. So I went to look at the source code of their websites.
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
Yes, and it's a company that makes hundreds of millions of dollars a year.
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
Just open app.medvi.org and search in DevTools gmail/yahoo/icloud and you will see js bundle with emails.

or seasonhealth/openloophealth to find another js bundle with staff emails.

g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
Would you like me to show you specific JavaScript files right here?
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
Yes, LLM assisted.
g48ywsJk6w48··on Tell HN: Medvi (telehealth) hardcodes 999 patient emails in public JavaScript
They look like real people's email addresses. I checked a few. They belong to real people.
g48ywsJk6w48··on Show HN: Whispering – Open-source, local-first dictation you can trust
Thank you for sharing such a great product. Last week after getting fed up with a lot of slow commercial products and wrote my own similar app that works locally in the loop and can record everything I say at the push of a button, transcribe it and put this into the app itself. And for me it was really important to create a second mode so I could speak everything I want in my mother tongue and that gets translated into English automatically. Of course, it all works with formatting, with the placement of commas, quote, etc. It is hard to believe that this hasn't been done in a native dictation app on macOS yet.
g48ywsJk6w48··on Ask HN: What non-existent app or tool would you pay for right now?
There are indeed several services that help manage subscriptions and the budget for them. There are separate applications that help manage passwords and track password database leaks on many services. There are separate applications that help to sort through and sort digital vaults.

But I haven't seen anything that does it all at the same time.

A couple of weeks ago, I was working through this concept from the perspective of Marie Kondo's methods. It turned out to be a very promising but very expensive project. It's hard to do it alone in a reasonable amount of time.

g48ywsJk6w48··on Show HN: 4B+ DNS Records Dataset
Thank you for data set!!! It is not always lowercase, so it have some duplicates.

Also you can avoid unnecessary data with analyze CNAME records. -- domain.tld CNAME www.domain.tld -- So you can use only domain.tld or www.domain.tld records.

g48ywsJk6w48··on Ask HN: Found a leak of US citizens personal data. Should I report it?
Unfortunately, he did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another data leak.
g48ywsJk6w48··on Ask HN: Found a leak of US citizens personal data. Should I report it?
Unfortunately, Brian Krebs did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another data leak.
g48ywsJk6w48··on Ask HN: Found a leak of US citizens personal data. Should I report it?
Unfortunately, they did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another data leak.
g48ywsJk6w48··on Ask HN: Found a leak of US citizens personal data. Should I report it?
Unfortunately, he did not answer for a week. Started thinking data leak is not a super interesting topic for professionals. It happened every week, so my discovery is just another data leak.
g48ywsJk6w48··on Ask HN: Found a leak of US citizens personal data. Should I report it?
I absolutely agree. It is unlikely that I will be thanked for such an act.

Destroy the reputation of a company with 10+ years of experience on the market. And force dozens of other companies across the U.S. to apologize to their customers for leaking data.

Not to mention lawsuits and fines for such a leak.