Amplitude customers using domain proxies should update their configuration immediately.

Posted by shed riot on Jul 22

After receiving live analytics requests intended for `api2.amplitude.com`,

I contacted `security () amplitude com` and was invited to submit the issue

through Amplitude's private Bugcrowd programme.



In my view, Amplitude's handling of the report, including closing it as

"Not applicable" despite evidence of intercepted customer traffic, caused

by insecure configurations and documentation, constitutes a negligent

approach to...