Re:how to completely own an airline in 3 easy steps
by some_furry on Friday January 20, 2023 @07:07AM
(#34451937)
They could also be talking about the Apple email leak caused by incrementing an UUID.
There's probably other notable cases with the same failure mode.
One of the things you learn working in computer security: history doesn't repeat itself, but it does rhyme.
Re:how to completely own an airline in 3 easy steps
by dekken_ on Friday January 20, 2023 @07:47AM
(#34452364)
> history doesn't repeat itself, but it does rhyme.
I do like Mark Twain
Re:how to completely own an airline in 3 easy steps
by some_furry on Friday January 20, 2023 @08:19AM
(#34452738)
Ah, yeah, that's where I heard it from first. Thanks!
Re:how to completely own an airline in 3 easy steps
by borski on Friday January 20, 2023 @08:59AM
(#34453184)
weev and AT&T as well.
Re:how to completely own an airline in 3 easy steps
by mrguyorama on Friday January 20, 2023 @03:49PM
(#34459726)
Nah history in information security repeats daily. How many unsecured mongodb databases exposed to the internet and unsecured S3 buckets did we see? Credentials have been committed to github so often that Github chose to build an automated alert system on their own dime that you don't even have to sign up for. How many times have lastpass and Experian been breached? How often do we STILL see sql injection attacks, a problem that has been actually solved for decades?
https://www.law.cornell.edu/uscode/text/17/1201