←back to thread

Klarna users are being signed in to random accounts

(twitter.com)
475 points danielstocks | 1 comments | 27 May 21 10:28 UTC | HN request time: 0.203s | source
Show context
dustinmoris ◴[27 May 21 10:47 UTC] No.27301350[source]▶
I find the default Twitter response by the Klarna social media account really annoying. The issue is not a system disturbance. The issue is clearly in the whole implementation of the system itself, code which was written by developers and where something really stupid has been implemented and where security was not taken into account at all because an issue like this could have been prevented at so many layers and yet it happened.
replies(2): >>27301593 #>>27302352 #
rrrhys ◴[27 May 21 11:17 UTC] No.27301593[source]▶
Whole implementation? It's probably the edge cache catching a cookie on the way out, a toggle box somewhere.
replies(2): >>27301799 #>>27301854 #
1. dustinmoris ◴[27 May 21 11:40 UTC] No.27301799[source]▶
With all respect, I don't disagree with your assumption about a silly cache somewhere, but that is sort of my point, if such a severe privacy and security vulnerability can be introduced by a single toggle box somewhere then the architecture of their platform is hugely lacking IMHO. This is not a cat photo sharing platform but a fin-tech business and there should be more layers to security than a single toggle box.