Tl;dv: Over 180k meetings left wide open
bobdahacker.com
Tl;dv: Over 180k meetings left wide open
1–10 of 231 posts
Re: Tl;dv: Over 180k meetings left wide open
#2Six Months !?! If I'd left a vulnerability like that open for 6 hours there'd be hell to pay. Something that critical is call for hitting the big red off button.
Re: Tl;dv: Over 180k meetings left wide open
#3Is this still active? I wouldn't mind spying on some meeting notes. Sounds fun.
Re: Tl;dv: Over 180k meetings left wide open
#4I keep being amazed how most basic things are not checked. Cross-tenant isolation is one of the main things I check for... With other generic information leaks.
Re: Tl;dv: Over 180k meetings left wide open
#5Is this still active? I wouldn't mind spying on some meeting notes. Sounds fun.
"Lets circle back and touch base to tease out any low hanging synergies we can capitalise on" - repeated 181,000 times
Re: Tl;dv: Over 180k meetings left wide open
#6I keep being amazed how most basic things are not checked. Cross-tenant isolation is one of the main things I check for... With other generic information leaks.
Sturgeon's Law is proved correct time and again. Most things are crap. Most people produce some crap in their lives. Some people only produce crap. Those people still need to eat but unfortunately some of them (somehow) find their way into tech and actually convince people to pay money for crap.
Especially with a low bar to entry like what is essentially AI-backed transcription-as-a-service, I'm not sure 90% is high enough. There will be 100 companies offering essentially the same thing and it's unfortunately the responsibility of the customer to find the one written by someone who doesn't have a parsnip where their brain should be.
Re: Tl;dv: Over 180k meetings left wide open
#7Hmm, does Ukraine know that Russia is watching the Ministry of Digital Transformation's meetings?
Re: Tl;dv: Over 180k meetings left wide open
#8Is this still active? I wouldn't mind spying on some meeting notes. Sounds fun.
If they haven't fixed it in 6 months, I'd say it's fair game to scrape as much as you can.
Re: Tl;dv: Over 180k meetings left wide open
#9Don't worry, I'm sure this was all an AI agent's fault, so no one to blame and all they need to do is update their code review prompts to not make mistakes.
Re: Tl;dv: Over 180k meetings left wide open
#10I keep being amazed how most basic things are not checked. Cross-tenant isolation is one of the main things I check for... With other generic information leaks.
Sturgeon's Law is proved correct time and again. Most things are crap. Most people produce some crap in their lives. Some people only produce crap. Those people still need to eat but unfortunately some of them (somehow) find their way into tech and actually convince people to pay money for crap. Especially with a low bar to entry like what is essentially AI-backed transcription-as-a-service, I'm not sure 90% is high…
Fortunately we have LLM's to not produce that crap... wait, those LLM's were trained on the existing crap and produce the same crap... oh no.