How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.
1 comment
dam0655 days ago
Awesome work! But only $5k reward? That’s almost asking for black hat attacks instead. Reward should be linked to the size and sensitivity of the data at risk.
Read the full thread on Hacker News →
Related stories
- I could've accessed 17T Microsoft recordsblog.faav.netHacker News · 261 points · 2 days ago
- I Could've Accessed 17T Microsoft Recordsblog.faav.netHacker News · 1 points · 5 days ago
- The Verge · 0 points · 6 days ago
- The Verge · 0 points · 6 days ago
- Microsoft stops insisting you need a "Copilot+ PC"arstechnica.comArs Technica · 0 points · 5 days ago
- Ars Technica · 0 points · 13 days ago