from Hacker News

Postman users are probably leaking their secrets to Postman's hosted servers

by jonthepirate on 9/8/21, 5:30 AM with 4 comments

I suspect most people who use recent versions of Postman might not realize there's a new "sync" feature that seems to upload all of your HTTP request configurations to Postman's hosted servers. That leads me to believe that if Postman gets hacked, that will probably cause a wave of data breaches which seem imminent.
  • by weastur on 9/9/21, 6:24 AM

    Just use "offline" tools like httpie. Pretty good interface. My experience suggests that a relatively small number of engineers need to work with more than 5-10 requests at a time. So you can just store commands in some text file or just using shell history search.
  • by fhaldridge7 on 9/10/21, 2:35 AM

    I've stopped using postman because they were pushing too hard for their paid plan. Now I'm using https://insomnia.rest/
  • by dyme13 on 9/8/21, 6:27 PM

    Hasn't sync been around since 2015? https://blog.postman.com/postman-2-0-with-sync-is-here/

    This is not a new problem with recent versions - it's always been a problem as far as I can tell.

  • by Graffur on 9/10/21, 10:03 PM

    The whole cloud product part of Postman is so useless. Does anyone recommend another similar service?