https://twitter.com/weezerOSINT/status/2045849358462222720
Article
-
Public Notion pages expose names, photos, and email addresses of all editors in metadata.
-
Behavior is documented in Notion’s help pages but buried and easy to miss.
-
Affects anyone who has ever edited a page that was later made public.
-
Issue has reportedly existed for at least five years.
Discussion
-
Notion’s Max Schoening responded directly: acknowledged it’s not good enough and fixes are in progress.
-
One HN commenter says they were deanonymized via this exact bug ~5 years ago.
-
General sentiment: Notion has drifted from useful tool to ‘AI everything app’ with declining trust.
-
Commenter criticism of the tweet itself for being AI-written drew a pointed reply.
Discuss on HN