Comment by gloosx

8 hours ago

API token with permissions to delete an entire production database in a file? Cool story, this database was destined to vanish. The system rules never mentioned that it shouldn't run destructive POST requests anyway.

I like how they are trying to find a scapegoat – Cursor failure, Railway's failures etc. Guys, it's YOUR failure, is it so hard to admit?