Member OP
Guys GUYS 😂 I open my Hetzner invoice PDF and there is FULL CREDIT CARD NUMBER from another customer! The redaction box is there but we make a test selecting text and BAM all numbers show. Is very good security no? I email them and they fix in 20 minutes. Now I have lifetime credit Who else testing their PDF right now?
Wah this one serious lah. I already check my invoice from InterServer, can or not? Lucky no problem dong. But now I scared already, maybe other month got leak also. You report to them or just email only?
20 years in this business and I have seen this exact failure twice before. Back when PDF generation was done by hand. Kids these days rely on automated tools they do not understand. Mark my words, this is not the last time. Some intern will push a broken build again.
Member
I checked my Hostinger invoice immediately No leak but their PDF is 4.3MB for one page. The wife asked why I was printing server bills at 11pm. Measured my UPS draw at 15A during the panic download. Everything documented.
Member
Hey folks this is Marcus, been with InterServer for a couple years now. Gonna be real with you, I just audited all my invoice gens after seeing this. Found a bug in their legacy pipeline. Super stoked Bruno caught his. Fixed now, no customer data exposed on my end. Hit my DMs if you want me to check yours personally.
How do you check if the redaction actually worked? I tried highlighting my KnownHost invoice and nothing shows but maybe Im doing it wrong? Thanks everyone 😅
Member
Just select all and paste into notepad thats the trick I found three different numbers in a RackNerd pdf from 2024 they never answered my ticket though maybe they dont care or maybe they already knew and hoped nobody noticed free identity theft with every renewal
I had same thing on RackNerd, 2024 invoice leaked three numbers
Notepad. The tool of champions. I have been telling people this since 2003 and they still look at me like I am crazy. PDF is not paper. It is a container. If you put text in a container and draw a black rectangle over it, the text is still in the container. This is not redaction. This is theater.
Member
I tested my Hetzner invoice from last month same method. No leak but I noticed the PDF is generated by some libre tool chain not their own code. Probably why Bruno got fast fix, they just changed a flag in the pipeline.
