3 ms·
Yeah this caught me off guard too- this basically means anyone on this chat service could do anything they wanted OR the chatbot was granted excess privileges o
by tru3_power 4y ago
Yeah this caught me off guard too- this basically means anyone on this chat service could do anything they wanted OR the chatbot was granted excess privileges on commission. Either way - serious violation of principles of least privileges.
- smashed 4y agoMy wild guess would be that they used chat rooms as a sort of access control. If you are in the room with the bot, you can issue commands. They could have forgotten that you can also just add the bot to another room. Major face palm, but plausible.
- mst 4y agoCertainly seems like the sort of idiotic mistake I could make.