Commenters highlight Postman's historical pattern of undocumented behavior changes
3 Nov 3 2:55 PM · 4d ago · 20 comments · 1 source · development 3 of 3
Developers recount that Postman has a long history of surprising users with undocumented caching, unexpected behavior, and integration features that were never explicitly requested.
“I found that Postman was caching what should have been independent requests. Easily blamed on Chrome at the time, but it was an undocumented and unexpected behavior by Postman.”
eddierogersidgarimella Developer / reporterPostman Labs Software vendor
The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump
What people said 24 voices · best of 39 · verbatim
-
In the Github issue filed, the context[1] for session start was authored by a Postman engineer [2] whose Github profile[3] page tagline is "I Solemnly Swear That I Am Up to No Good."Yeah, I am sure that engineer was trying to be witty and clever, but now if Postman's ever got sued in court, the joke's on them.I swear I am not making this SH*T…
-
Postman 桌面端现会自动在设备 agent 应用安装 skills 及 hook，引起争议。 - 还包括配置远端 MCP 服务以及安装 Postman CLI 等。 gh:postmanlabs/postman-app-support#14370 seealso: HackerNews:50354960 #Postman #LLM Telegram 原文
-
It's so hard to see this happen. I worked for postman for 4 years, and it was a great place to work for a long time. I've also seen how the industry has changed.As agents start to write all the code, API platforms need to adapt to the new user. That means a complete rethink about how to approach API development.It's why I'm building Sannr, an API…
-
Many, many years ago, I used Postman for the first time, way back when it was a Chrome plugin. As an iOS dev, it was amazing to be able to validate the requests I needed to make outside the context of my code to validate things worked. Until, one day, I wasn't seeing something iterate in the responses I was getting as I expected to. Many cmd+R…
-
I was about to ask why on earth an HTTP client needs 1500 employees and a 5B valuation, but then I realized that perhaps it is just envy speaking.Im simply envious that I dont own an AI-native cloud-first enterprise-grade zero-trust secure-by-design API lifecycle management ecosystem powered by agentic AI workflows autonomous coding agents pre…
-
>It's a shame what happened to Postman. It started as an excellent little developer tool for testing APIs. Then for some reason they raised over $400M in funding and hired 1,500+ employees, for what should have been a tiny OSS/passion project like curl or little snitch. Instead they now have to justify their valuation by forcing logins, collecting…
-
Yep I’m finally switching off of postman today. I’ve wanted to for a while, but my team at work uses it, and all of our shared stuff is in there.I’ve been thinking of replacing postman with a clojure project, where you just send stuff to the REPL to call it. You could even set up a little dependency map, so your calls would have built-in behavior…
-
My project freezes the postman version to the last one which supports local data, 10.27.x or something. I honestly can't fathom what extra feature can a newer version have that is critically missing from this old one. It feels like a solved problem to me. I know that tools change all the time, but this version seems to do whatever a postman like…
-
I used to use Postman daily almost ten years ago. Then as my last hurrah before retirement, I took an embedded job that didn't involve me beating on a web API, so I didn't use Postman anymore.So imagine that I hear about this "Postman" product that involves subscriptions, and AI, and "valued at $X billion" and all this crap, and you can see how I…
-
> I still don't know how they're valued at $5B+Because, current valuations are completely detached from any operational or market realities that affect a company. The metric has become the goal, and the metric is controlled by nontechnical people that have no intuitive understanding of how technical products are used. Even worse, they’ve all gone…
-
Postman logs detailed information on every single API request you make through its tool, including query parameters. If you use the templating syntax `{{some_secret}}` to fill in a query parameter, it sends the actual secret content of `some_secret` to Postman's servers. If you disable outgoing network traffic to this logging endpoint, the entire…
-
I use RESTer, a Firefox extension, to test APIs: https://addons.mozilla.org/en-US/firefox/addon/rester/It's an in-browser equivalent of Postman.I much prefer the approach of being able to use the browser for things like this. It feels much more lightweight than installing a piece of desktop software.
-
When they started uploading things to the server and requiring you to have an account to access the things that they STOLE from your machine without authorization in first place, I uninstall it...What can go wrong by uploading your things, if you had any passwords or users there that "pinky promise" will not be uploaded, then running AI and maybe…
-
If you're a backend dev writing an API you should be writing automated tests. Clicking around in a GUI app is not the correct way to do things.If you're exploring someone else's API there are lots of other clients you can use. Resonance seems pretty solid to me. Don't get what's the point of all the extra faff in Postman.If you want to get real…
-
just last week i was looking for a tui version of postman and found https://github.com/darrenburns/postingi've been using the beta since and am very happy. api checks are just yaml and can get stored in git to version and share and tui is nice and easy to drive via the keyboard
-
We're using Postman at work (I think we have a subscription for 10 or 20 users), mostly when doing REST development and to share the API calls between people. Though I rarely have to use it so each time I'm so confused of between the collections, environment, vaults, variables...Also if you have an alternative that's easier to use, I'm interested
-
Yes, this is very bad. I've alerted my team and we'll be deprecating its use immediately. Hopefully procurement can get refunds on the licenses we purchased not that long ago. Something tells me Postman is going to regret violating people's trust - the moat isn't so large that people must endure unethical, if not illegal, behavior like this.
-
Relying on heavily managed, LLM-driven developer platforms introduces severe data exfiltration risks. These complex environments mostly preferred by newer generations of programmers represent critical supply chain exploitation risks that simply never existed in traditional local setups. The consequences are incidents like recent Binance hack.
-
Postman used to be a simple tool to make http requests.Now it is some kind of incomprehensible thing that requires me to log in and create a 'collection' or whatever it was when I just wanted to make a simple call to some api to see what it does.Like.. wtf. Why did they need to turn it into some monstrosity?
-
Postman was my curl with a gui. Used it everywhere, recommended it everywhere. But one day out of the blue it asks me to login, and it all went downhill from there. Imagine you had to login to use curl?Anyway, I'm sure somewhere in some terms and conditions I agreed to, it says "we own the glass".
-
I am just going to build my own free little http client (miss the days when postman was just that). Building my own client here - https://pypi.org/project/librepost-app/ Feel free to contribute
-
I needed something like Bruno or Postman the other day and instead I had an LLM agent generate two throwaway bash/python scripts based on the API client code I already had.That's just one use case but I feel like such tools lost a lot of the relevance because of LLMs.
-
I am just learning about this because I was unaware. Thank you for sharing the notice. I'm embarrassed that I didn't catch this myself and will change my process so issues like this don't go unnoticed. Needless to say, I will forgo Postman for other options.
-
Switched to intellij http scratches ages ago. Then go curl. I remember a bunch of people using postman from a decade to a few years ago. It's been a while since I've seen anyone. Probably people who do it rarely but haven't taken the time to change tools.
All 3 developments of Postman silently auto-installs AI plugins, injects startup… →
Hacker NewsNewswiresMastodon