Codeanywhere IDE Exposes Others' Files

Y	Hacker News new \| ask \| show \| jobs

1 points by jameskennemore 4911 days ago

While using Codeanywhere (https://codeanywhere.net/) and creating a new directory on the remote FTP server, the result was a folder filled with over 3,600 files that don't belong to me.

I've notified Codeanywhere, but even though I got a response "Will look into this right away.", there's been no follow-up.

...just in case you're a Codeanywhere user, here's the list of files: http://pastebin.com/GavSHqtv

(That being said, I liked Codeanywhere over Cloud9 and was about to subscribe. Should I still?)

1 comments

fruchtose 4911 days ago

There's no way I would use Codeanywhere if what you're saying is true. In the worst case scenarios, you were given direct, unauthorized access to a stranger's personally identifiable information. What makes you think your information will be more secure?

link