top | item 32493222

(no title)

U1F984 | 3 years ago

Same here, three minutes ago. Maybe their Key was leaked as well? I recall a similar issue happened with Firebase: https://cybernews.com/security/exposed-google-keys-leaves-bi...

discuss

order

axby|3 years ago

Interesting, but why would an attacker push a notification like this to so many people?

Or did not many people get it? Could I be targeted, along with the others in this thread?

If the attacker really intended to send the notification to everyone (or even 10%), wouldn't that very likely get the attention of Airbnb, and then they'd know about the issue and be able to mitigate it?

Edit: assuming everyone got it, this seemed much more likely to be a mistake, to me. For example, someone working at Airbnb was testing something and accidentally did it in prod instead of dev. Otherwise, why not camouflage this as something more innocent, like an ad for Airbnb, saying something generic like "Check out our listings near you"?

SoeMyzlack|3 years ago

Could be a POC for an attacker. If they got the ability to send out custom push notifications in the future they could contain malicious links.