News for hackers. Stuff that matters.

A comment on New ‘Meow’ attack has deleted almost 4k unsecured databases. Parent comment

Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by dredmorbius on Monday July 27, 2020 @12:58AM (#23962347)
The data may be modified at any time without a trace, rendering it void.

Secure your damned database.

The fault and responsibility lie with the deploying organisation and tools vendor. Meow is just the messenger.

[ Parent | on HN ]
Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by KMag on Monday July 27, 2020 @01:25AM (#23962456)
But if they had used the password changes API to assign random passwords to all accounts, as suggested, then the data couldn't be modified. Am I missing something?
[ Parent | on HN ]
Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by _-___________-_ on Monday July 27, 2020 @04:51AM (#23963331)
Parent's point is that any conclusion one could make from the data is worthless because, being public and unsecured, it could have been modified by any Internet user at any time before a password was set.
[ Parent | on HN ]
Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by dredmorbius on Monday July 27, 2020 @07:22AM (#23964011)
Correct.
[ Parent | on HN ]
Re:New ‘Meow’ attack has deleted almost 4k unsecured databases by dredmorbius on Monday July 27, 2020 @02:22AM (#23962652)
My understanding is that password-secured DBs aren't vulnerable to Meow remediations.
[ Parent | on HN ]