Yea not sure who approved the PRs that got merged exposing those auth fields... Its not really a data breach like the CEO claims but simply their in house API that exposes auth fields for any and all users.
Either this was done intentionally by a employee, a huge oversight in a code review, or possibly a junior engineer's poc that got pushed to prod by mistake
3 comments
[ 0.28 ms ] story [ 15.6 ms ] threadEither this was done intentionally by a employee, a huge oversight in a code review, or possibly a junior engineer's poc that got pushed to prod by mistake
Source: https://www.wired.com/story/christopher-bouzy-spoutible-race...
- Mastodon
- Bluesky
- Farcaster
- Threads
(And that's ignoring social networks which don't have the short-form format Twitter does, e.g. Lemmy, Kbin, Discuit).
And now, Spoutible.
1. Why would someone choose Spoutible over another competitor like Bluesky?
2. A lot of these smaller networks should federate.