Trigger.dev customer environment variables exposed

 (trigger.dev)

34 points | by anurag 3 hours ago

4 comments

  • corvad 14 minutes ago
    I am sorry, this is "Resolved"? How can they even consider marking this resolved in any situation. Yeah we exposed your env vars but we told you about it over email so it's all good... We dont know how or to what extend though.
  • iampims 30 minutes ago
    It’s bold to set status page incident to resolved.
    [-]
    • weird-eye-issue 8 minutes ago
      If they fixed the exploit then what do you want them to do? Do they need to wait an arbitrary amount of time before setting it to resolved?
    • cheeze 6 minutes ago
      I like the fancy gradient INCIDENT REPORT image as well. At least it looks fancy and AI-ey
  • reassess_blind 1 hour ago
    Have any of these companies disclosed the actual vulnerabilities used to gain access to their systems?
    [-]
    • dboreham 2 minutes ago
      No. Which may mean they don't know.