РазведкаОригинал на английском
16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data
Русский перевод готовится и скоро появится на сайте. Пока доступен оригинал на английском.
A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens.
Help Net Security··3 мин чтения
A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found that Titan did not verify the signature on login tokens. That let him pose as the service’s administrator and run SQL queries against 17 connected databases holding an estimated 17.3 trillion rows. He did this with the help of Antares, an … More → The post 16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data appeared first on Help Net Security.