4 ms·
Ideally they'd report it so that password managers could warn everyone, but with just the database URI there isn't necessarily any obvious way to know what doma
by Alex3917 6y ago
Ideally they'd report it so that password managers could warn everyone, but with just the database URI there isn't necessarily any obvious way to know what domain or business its associated with.
- wtracy 6y agoIf the attacker can write to the DB, then they can add entries to every table with the string "Hey your database is unsecured!"
- GekkePrutser 6y agoDoesn't really matter, as long as the credential is exposed, users can be warned. No matter where it came from.