disconnection
Joined 7 years ago
Karma
33
Submissions
30
Member since
Jan 20
Joined 7 years ago
IMO either it was decompiled (a tedious but not complex task to do by hand, now automated) and illegal, or properly clean-roomed and buggy slop.
If it was me doing this, I'd anonymously dump the source onto a torrent, not parade around the media.
IMO Railway's response was evasive, underplayed the incident, and did not reflect the severity of this failure. As a response we pulled all our big projects off Railway.
All I want is that my data is reliably secure on some iron somewhere, without a million vibe coding features or whatever they are trying to build, distracting from basic security.
Anything hosted on Railway is at a huge risk, IMO.
https://blog.railway.com/p/incident-report-march-30-2026-acc...