course prep arena ask shorts stories you ?

0 / 100 xp → junior

~course prep arena ask shorts stories you

Loading page…

~/himanshutty1

~/himanshu$cd ~/next-page

[ok]resolve route

[..]stream page

Loading page…

~/sdmtty1

~/sdm$cd ~/next-page

[ok]resolve route

[..]stream page

lecture · 10:57 · 3 checkpoints · browser voiceIntermediate

CDN cache poisoning: someone else's cart

The ShopFast case file: on Black Friday a CDN rule cached /api/* by URL path alone and ignored the origin's private headers, so one user's cart, address and card digits reached others while every backend dashboard stayed green. How it was found, contained and fixed for good.

Read the case file: The Silent Cache Poisoning Disaster: When CDN Becomes Your Enemy→

01 · Black Friday, 10:47 AM

CASE-004 · The Silent Cache Poisoning Disaster: When CDN Becomes Your Enemy

Someone else's cart.

Black Friday at ShopFast

Meet David Kim, a senior backend engineer at ShopFast, the e-commerce platform in this case file.

~/systemdesignmastery.dev

0:00 / 10:57Black Friday, 10:47 AM

chapters1/20

checkpoints 0/3 right · +10 XP each

space play · ←/→ step · J/L 10 s · C captions · M music · F full screen · < > speed · S snip

up nextThe 2 AM integer overflow→autoplay next

← read the case file: The Silent Cache Poisoning Disaster: When CDN Becomes Your Enemy all lectures