I absolutely despise Firebase Firestore (the database technology that was "hacked"). It's like a clarion call for amateur developers, especially low rate/skill contractors who clearly picked it not as part of a considered tech stack, but merely as the simplest and most lax hammer out there. Clearly even DynamoDB with an API gateway is too scary for some professionals. It almost always interfaces directly with clients/the internet without sufficient security rules preventing access to private information (or entire database deletion), and no real forethought as to ongoing maintenance and technical debt.

A Firestore database facing the client directly on any serious project is a code smell in my opinion.

[–] meme_historian@lemmy.dbzer0.com 10 points 6 days ago

Ah yes, Firebase. The Google version of leaking all your company data through a public S3 bucket

I remember when they launched and started pushing it in the Android dev community. Actually won a Google Pixel at a Firebase sponsored hackathon in my town...after that I never touched Firestore again. Using that ACL language to restrict access, you could see the massive foot gun from a mile away

load more comments (4 replies)