4 ms·

Didn’t we already read this was entirely on Snowflake? They had employee credentials leaked — Solutions Engineers specifically. These were support credentials h

Didn’t we already read this was entirely on Snowflake? They had employee credentials leaked — Solutions Engineers specifically. These were support credentials hanging around from when large clients integrated with Snowflakes So all it took was one master-key credential to be leaked to affect thousands of customer accounts.

skilled 2y ago
The post that alleged this[0][1] was removed/withdrawn. I do think that they spoke with the real perpetrator, because there is a lot that connects with that story. But there are a lot of smaller details that don't add up. And I don't believe Snowflake hired Mandiant/CrowdStrike just to come out with a lie that their systems weren't breached. Maybe someone else will speak to the guy who did all this to get a much clearer overview of the situation. [0]: https://news.ycombinator.com/item?id=40534868 https://news.ycombinator.com/item?id=40534868 [1]: https://web.archive.org/web/20240531140540/https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection https://web.archive.org/web/20240531140540/https://www.hudso...
- hipadev23 2y ago
  So we’re at the “two is coincidence” stage and the next leak will change the narrative back to Snowflake.
- xyst 2y ago
  The last exchange with the alleged hacker is a bit sus: researcher: > [snowflake] should have bought protection from Hudson Rock > could have saved them from this one hacker: > yes I agree > it would have helped Smells like a guerilla advertisement; or a hit piece to disparage competitors. Or maybe it was because some in-house legal team pulled it back. For now, I am getting bearish signals on SNOW. The initial reports of them blaming it on customers not enabling multi factor authentication is a way to deflect blame until they can figure out a way to deal with pending dump on their stock. Honestly, if this exchange with the hacker is legit. The $20M the hacker extorted the company for is going to be peanuts compared to the reputation loss and stock dump. Yet another L for SaaS based products. A centralized source of failure.
aaronharnly 2y ago
We read that[0], and then the company that published it un-published it without any accompanying notice[1]. [0] https://web.archive.org/web/20240531140540/https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection https://web.archive.org/web/20240531140540/https://www.hudso... [1] https://news.ycombinator.com/item?id=40547921 https://news.ycombinator.com/item?id=40547921

skilled 2y ago

The post that alleged this[0][1] was removed/withdrawn. I do think that they spoke with the real perpetrator, because there is a lot that connects with that story. But there are a lot of smaller details that don't add up. And I don't believe Snowflake hired Mandiant/CrowdStrike just to come out with a lie that their systems weren't breached. Maybe someone else will speak to the guy who did all this to get a much clearer overview of the situation. [0]: https://news.ycombinator.com/item?id=40534868 https://news.ycombinator.com/item?id=40534868 [1]: https://web.archive.org/web/20240531140540/https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection https://web.archive.org/web/20240531140540/https://www.hudso...

hipadev23 2y ago
So we’re at the “two is coincidence” stage and the next leak will change the narrative back to Snowflake.
xyst 2y ago
The last exchange with the alleged hacker is a bit sus: researcher: > [snowflake] should have bought protection from Hudson Rock > could have saved them from this one hacker: > yes I agree > it would have helped Smells like a guerilla advertisement; or a hit piece to disparage competitors. Or maybe it was because some in-house legal team pulled it back. For now, I am getting bearish signals on SNOW. The initial reports of them blaming it on customers not enabling multi factor authentication is a way to deflect blame until they can figure out a way to deal with pending dump on their stock. Honestly, if this exchange with the hacker is legit. The $20M the hacker extorted the company for is going to be peanuts compared to the reputation loss and stock dump. Yet another L for SaaS based products. A centralized source of failure.

aaronharnly 2y ago

We read that[0], and then the company that published it un-published it without any accompanying notice[1]. [0] https://web.archive.org/web/20240531140540/https://www.hudsonrock.com/blog/snowflake-massive-breach-access-through-infostealer-infection https://web.archive.org/web/20240531140540/https://www.hudso... [1] https://news.ycombinator.com/item?id=40547921 https://news.ycombinator.com/item?id=40547921