News for hackers. Stuff that matters.

A comment on Microsoft comes under blistering criticism for “grossly irresponsible” security. Parent comment

Re:Microsoft comes under blistering criticism for “grossly i... by prepend on Wednesday August 02, 2023 @10:16PM (#36980554)
Remember when cosmosdb users could read other users databases? [0]

It was so boneheadedly stupid, it was like a sysadmin making all user directories readable by all users. Not sure how that would not be tested. And made me worry about what other vulnerabilities lurk in Azure.

[0] https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-v...

[ Parent | on HN ]
Re:Microsoft comes under blistering criticism for “grossly i... by insanitybit on Thursday August 03, 2023 @08:14AM (#36984767)
The vulns from wiz were so bad I basically wrote off Azure that day. And not bad like 'impact is high', bad like 'did anyone in your massive security org actually look at this?'.
[ Parent | on HN ]