Hacker News new | past | comments | ask | show | jobs | submit
Admin password/credentials compiled into a JavaScript SPA bundle, freely accesible to the internet. Twice. Classic rookie mistake.