Submitted 1 year ago by L4s@lemmy.world [bot] to technology@lemmy.world
Microsoft AI team accidentally leaks 38TB of private company data::undefined
That’s impressive. My last company held on to nearly all of the north american real estate listings for a 3+ year period, including all the photos that realtors post with their listings, and it was about 35TB
Wiz says that this occurred as a result of an Azure feature called Shared Access Signature (SAS) tokens, which is “a signed URL that grants access to Azure Storage data.”
The URL gave full access to read and write all data in the Azure Storage. This is so obvious a security hole. This “feature” should never be. If you are going to use signed urls, then implement them so that they expire after 24 hours or something.
The SAS token could have been set up with limitations to what file or files could be accessed. However, this particular link was configured with full access.
Apparently the AI researchers weren’t trained on how to properly secure SAS tokens, or were just neglegent.
As an API developer it’s appalling to me that someone wouldn’t immediately change this
So this is connected to the leaks that were going around about xbox earlier this week eh?
Oh shit, I didn’t think about that. XD
ups lulz
That’s one hell of an impressive fuck-up.
“The exposed data included full backups of two employees’ computers.”
This is not Microsoft’s week
Wheeeeeeeeeeeeee!
Alchemy@lemmy.world 1 year ago
Just a minor mishap, not like a TB is that big or anything. /s
Stovetop@lemmy.world 1 year ago
Depends on what that 38TB is, I suppose. 38TB of internal documents, financials, communications is a lot. 38TB of media could be, like, a single work-in-progress Xbox promo montage given the large file sizes and version control/redundancy of media production workflows.
A modern Pixar movie is several hundred terabytes of production data.
bernieecclestoned@sh.itjust.works 1 year ago
How many dick pics is it?