▲ 78 ▼ How I Could’ve Accessed 17 Trillion Microsoft Records (blog.faav.net) submitted 2 weeks ago by blibla@slrpnk.net to c/cybersecurity@infosec.pub 4 comments fedilink hide all child comments A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing. They paid him $5000 and told nobody about it.
[–] devaly@ani.social 24 points 2 weeks ago (1 child) 5k 😭 permalink fedilink source hideshow 1 child comment replies: [–] Slartifartblast@piefed.social 6 points 2 weeks ago It's a predictably paltry payout, no doubt about it. permalink fedilink source parent
[–] Slartifartblast@piefed.social 6 points 2 weeks ago It's a predictably paltry payout, no doubt about it. permalink fedilink source parent