undefined | Better HN

0 pointsmattmanser6y ago0 comments

Did it actually come from @trello.com?

As I got the same email from @trellis.coffee and assumed it was a phishing attempt.

0 comments

4 comments · 2 top-level

thedufer6y ago· 2 in thread

I'm a former Trello employee - trellis.coffee is the domain the primary dev server is hosted at. It sounds like they failed to excise your email address from the dev database (at least, that's what we did when I worked there).

mattmanserOP6y ago

It's concerning that they're obviously copying production data to a dev database.

znpy6y ago

Dude you might have leaked private information. Not much really, but still... The dns record show the private addressing of the dev server:

    znpy@eomdb:~$ nslookup trellis.coffee
    Server:  127.0.0.53
    Address: 127.0.0.53#53
    
    Non-authoritative answer:
    Name: trellis.coffee
    Address: 10.253.0.237
    Name: trellis.coffee
    Address: 10.253.3.171

also: dig -t any trellis.coffee

PeterStuer6y ago

It did indeed come from and links to the trellis.coffee domain.

j / k navigate · click thread line to collapse