3 ms·
For anyone who is coming straight to the comments before reading the article: the details are even worse than the headline suggests. Not only was a huge amount
by teraflop 10y ago
For anyone who is coming straight to the comments before reading the article: the details are even worse than the headline suggests.
Not only was a huge amount of information exposed through a public, unauthenticated MongoDB instance, and not only did CloudPets ignore multiple security researchers' attempts to alert them to the problem, but the database was actually held for ransom multiple times without customers being alerted to the breach.
- r1ch 10y agoFrom what I've seen, a lot of of those MongoDB ransomwares actually just delete the data and leave a ransom note in the hope of getting free bitcoin. So in a sense they've done some good by removing it from the internet.
- nvarsj 10y agoThis is _insane_. My daughter got a surprise cloudpet for her birthday from a distant relative. The app you have to use with the cloudpet is also filled with ads, some of which are of adult nature. This company is sleazy as hell. I hope they get sued out of existence.
- lazyasciiart 10y agoThey basically failed out of existence before this even happened (the article includes details on their share price sliding to nothing earlier last year), which is probably one reason they didn't bother telling customers about it. This is probably the best example I've ever seen of the dangers of trying to keep a service running once the company behind it has gone under.
- shostack 10y agoWhy did they fail aside from security issues?
- minimuffins 10y agojust a guess: their product is stupid