in a past job, we had a financial controller with an off-by-one email address to the team-wide alias. The first sensitive email leaking PII didn’t lead to a fix, but the second one leaking salary details sure did.
And I thought *that* was amateur hour.
Dave Shea
npub1hw…25eu0
2025-03-24 22:44:32 UTC
in reply to nevent1q…2xun
Author Public Key
npub1hw2mk7qks7mukpl4g2te3aarszsyy9uz8ms0fu9fadr4ff9aafjqh25eu0Seen on
wss://relay.momostr.pinkPublished at
2025-03-24 22:44:32 UTCEvent JSON
{
"id": "8e284412520f429b828204a7739a71cd96597a1c11797e0244cd1911150bc9c4",
"pubkey": "bb95bb781687b7cb07f5429798f7a380a04217823ee0f4f0a9eb4754a4bdea64",
"created_at": 1742856272,
"kind": 1,
"tags": [
[
"p",
"2f3afe951cf211bd163306f5698222e2f16c25b928743efba74f3d135d848c10"
],
[
"e",
"7cf3a648e64cf4712468ea29a1f0be28414096428906ac5606194a85e89346de",
"",
"root",
"2f3afe951cf211bd163306f5698222e2f16c25b928743efba74f3d135d848c10"
],
[
"proxy",
"https://cosocial.ca/@daveshea/114219828653746396",
"web"
],
[
"proxy",
"https://cosocial.ca/users/daveshea/statuses/114219828653746396",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cosocial.ca/users/daveshea/statuses/114219828653746396",
"pink.momostr"
],
[
"-"
]
],
"content": "in a past job, we had a financial controller with an off-by-one email address to the team-wide alias. The first sensitive email leaking PII didn’t lead to a fix, but the second one leaking salary details sure did. \n\nAnd I thought *that* was amateur hour.",
"sig": "e07570ed786d43e8a8320f72a626396b0e2fc37f8e533b5d494b705199b6063a81064bd8a133cd889d72639d696f2283cc6ad01e187afdcb58c18c2576eef4d3"
}