▲ 78 ▼ How I Could’ve Accessed 17 Trillion Microsoft Records (blog.faav.net) submitted 3 weeks ago by blibla@slrpnk.net to c/cybersecurity@infosec.pub 4 comments fedilink hide all child comments A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing. They paid him $5000 and told nobody about it.
[–] Slartifartblast@piefed.social 6 points 3 weeks ago It's a predictably paltry payout, no doubt about it. permalink fedilink source parent