Comment by Kwantuum

2 hours ago

The fact that this can happen at all without the security team's knowledge is telling.

Probably not as telling as you think it is.

The security team at any organization is always considered an enemy to product and innovation. It wouldn't be surprising if management made it impossible for them to put in place the monitoring necessary to know this was happening. Especially at somewhere whose motto is "move fast and break things".

Important tech people on HN seem to be surrounded by technical excellence while the user data leaks and other sociological externalities happen to trail all the nearby paths.