I think I just cooked something 🔥
jev(): a PostgreSQL extension that searches your whole database in natural language. No index, no embeddings, just one function.
WHERE jev(people, 'could work from home')
or
WHERE jev(people, 'name sounds european')
129 rows judged in ~1s for $0.0009. Second run: 6ms from cache.
if you are a programmer and you'd like to start a company it is helpful to internalize two big weaknesses you have
1. your instincts for anything outside programming are terrible. everything you believe is likely 100% backwards
2. you've always been treated like the smart person in the room so it will take you a very long time to understand #1
for me personally it took ~ 10 years before i started to be able to unwind this
Hey Marcin,
Rishabh here, founder of Dodo Payments.
As founder, I take full responsibility.
We shared this security incident a couple of weeks ago.
https://t.co/IlhavRbXPs
Salient points from our announcement.
1. No ID documents were accessed. No copies, scans or images of your ID, no bank documents, no passwords or login credentials, no personal documents of any kind.
2. Our PCI L1 Certifications holds true. The affected system had no connection to our cardholder data environment.
3. The incident involved CVE-2026-72898, a Metabase vulnerability that allowed authentication to be bypassed. We observed it and closed it within hours.
4. This vulnerability has also been exploited against other technology companies, including Framework, Tally, n8n, Kilo Code, Checkly, and Scalingo.
5. Not everyone chose to disclose it but
we choose to be honest and transparent.
Lastly, Dodo Payments holds itself to highest standards and this is of course an unfortunate outcome.
What are we doing to resolve this
1. We are in the midst of SOC 2, SOC 1, ISO, HIPPAA and other certifications that would limit these situations.
2. Adding more internal measures such as encrypting all important data, VPN for all internal tools etc.
However with AI making intelligence a commodity, we constantly see respected payment platforms such Stripe, Checkout and others hit with similar issues.
Thanks again for understanding. We have our heart in the right place.
I'm happy to answer any other questions you or anybody else on X might have about Dodo Payments, this incident and in general how we are building secure systems at Dodo.
CC @ayushagarwal