Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
jcoder
on June 18, 2012
|
parent
|
context
|
favorite
| on:
Heroku Invoice Security Issue - You can see anyone...
EDIT: removing URLs because it's the right thing to do.
rjsamson
on June 18, 2012
[–]
Click on 'current usage' in your account and it takes you to your current invoice, which is accessible via the URL that he mentions. It appears to be only the current months usage / invoice that is vulnerable.
jcoder
on June 18, 2012
|
parent
[–]
EDIT: removing URLs because it's the right thing to do.
rjsamson
on June 18, 2012
|
root
|
parent
[–]
Yikes - so are past invoices available as well then via the show/:id url?
Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
