3 ms·
ChaosDB: We hacked thousands of Azure customers’ databases
- pketh 5y agoI’m pretty interested but ignorant in the security detecting industry. It’s not mentioned in the article but would a big company like Microsoft be expected or obligated to pay Wiz a bounty for the discovery and disclosure of this vulnerability?
- dharmab 5y agoThey are not required to. However, it is a courtesy to encourage responsible disclosure. Like a reward for returning a lost wallet.
- cafard 5y agoThey seem to be using "primary key" in the sense of API key, which is a bit confusing when they are discussing databases.