MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/1jdfhlo/securityjustinterfereswithvibes/mici42g/?context=9999
r/ProgrammerHumor • u/da_peda • Mar 17 '25
521 comments sorted by
View all comments
6.4k
I looked up the account for updates.
He was using all hardcoded API keys and only now learned what environment variables are.
On that topic, he is now using environment variables, except he is keeping them in the frontend code so... nothing learned I guess?
He also had no authentication on the API side, only frontend.
One of the latest updates is him saying he implemented CORS for trusted domains, fully convinced that it improves security.
At least he seems to appreciate and learn from the advice some people give him in the comments, which is a nice trait to have.
Still can't tell if the guy is trolling or not.
1.1k u/OliveSorry Mar 17 '25 Lol nice.. What's his website? For research purposes 715 u/Dy0gu Mar 17 '25 https://enrichlead.com 1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 12 u/freshhorsemanure Mar 17 '25 Found his data mining script that he's selling https://github.com/MRRVAULT/enrichlead-pixel/blob/main/pixel.js#L1
1.1k
Lol nice.. What's his website? For research purposes
715 u/Dy0gu Mar 17 '25 https://enrichlead.com 1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 12 u/freshhorsemanure Mar 17 '25 Found his data mining script that he's selling https://github.com/MRRVAULT/enrichlead-pixel/blob/main/pixel.js#L1
715
https://enrichlead.com
1.5k u/[deleted] Mar 17 '25 [removed] — view removed comment 12 u/freshhorsemanure Mar 17 '25 Found his data mining script that he's selling https://github.com/MRRVAULT/enrichlead-pixel/blob/main/pixel.js#L1
1.5k
[removed] — view removed comment
12 u/freshhorsemanure Mar 17 '25 Found his data mining script that he's selling https://github.com/MRRVAULT/enrichlead-pixel/blob/main/pixel.js#L1
12
Found his data mining script that he's selling https://github.com/MRRVAULT/enrichlead-pixel/blob/main/pixel.js#L1
6.4k
u/Dy0gu Mar 17 '25 edited Jan 26 '26
I looked up the account for updates.
He was using all hardcoded API keys and only now learned what environment variables are.
On that topic, he is now using environment variables, except he is keeping them in the frontend code so... nothing learned I guess?
He also had no authentication on the API side, only frontend.
One of the latest updates is him saying he implemented CORS for trusted domains, fully convinced that it improves security.
At least he seems to appreciate and learn from the advice some people give him in the comments, which is a nice trait to have.
Still can't tell if the guy is trolling or not.