3 ms·
Why wasn't this using SAML and therefore 2FA? I see that's a feature in Envoy 's highest price plan. How ironic.
by lozenge 4y ago
Why wasn't this using SAML and therefore 2FA? I see that's a feature in Envoy 's highest price plan. How ironic.
- numbsafari 4y agoThe article says that the credentials were included in code checked into a public repo. Most likely they were API keys that were leaked. ... which begs the question why they were using API keys and not workload identity?