Data accidentally exposed by Microsoft AI researchers
1–10 of 238 posts
Re: Data accidentally exposed by Microsoft AI researchers
#2Just proves how hard it cloud security now. 1-2 mistake and you expose TB's. Insane.
Re: Data accidentally exposed by Microsoft AI researchers
#3Just proves how hard it cloud security now. 1-2 mistake and you expose TB's. Insane.
Hard coded secrets in shareable URL’s with almost infinite time windows and an untraceable ability to audit what’s made and shared and at what level?
Sounds like it’s as hard as it’s always been. Pretty basic and filled with humans
Re: Data accidentally exposed by Microsoft AI researchers
#4Just proves how hard it cloud security now. 1-2 mistake and you expose TB's. Insane.
My wife and I just rewatched WarGames for the millionth time a few nights ago.
The level of cybersecurity incompetency in the early 80's makes sense; computers (and in particular networked computers) were still relatively new, and there weren't that many external users to begin with, so while the potential impact of a mistake was huge (which of course was the plot of the movie), the likelihood of a horrible thing happening was fairly low just because computers were an expensive, somewhat niche thing.
Fast forward to 2023, and now everyone owns bunches of computers, all of which are connected to a network, and all of which are oodles more powerful than anything in the 80s. Cybersecurity protocols are of course much more mature now, but there's also several orders of magnitude more potential attackers than there were in the 80s.
Re: Data accidentally exposed by Microsoft AI researchers
#5Part of me thought "this is fine as very few could actually download 38TB".
But that's not true as it's just so cheap to spin up a machine and some storage on a Cloud provider and deal with it later.
It's also not true as I've got a 1Gbps internet connection and 112TB usable in my local NAS.
All of a sudden (over a decade) all the numbers got big and massive data exfiltration just looks to be trivial.
I mean, obviously that's the sales pitch... you need this vendor's monitoring and security, but that's not a bad sales pitch as you need to be able to imagine and think of the risk to monitor for it and most engineers aren't thinking that way.
Re: Data accidentally exposed by Microsoft AI researchers
#6Part of me thought "this is fine as very few could actually download 38TB". But that's not true as it's just so cheap to spin up a machine and some storage on a Cloud provider and deal with it later. It's also not true as I've got a 1Gbps internet connection and 112TB usable in my local NAS. All of a sudden (over a decade) all the numbers got big and massive data exfiltration just looks to be trivial. I mean, obvious…
Trivial in a technical sense but monitoring capabilities (hopefully) have increased in kind.
Re: Data accidentally exposed by Microsoft AI researchers
#7how is this sort of stuff not at least encrypted at rest?
Re: Data accidentally exposed by Microsoft AI researchers
#8Would be insane if the GPT4 model is in there somewhere (as its served by Azure).
Re: Data accidentally exposed by Microsoft AI researchers
#9On a lighter note - I saw a chat message that started with "Hey dude! How is it going". I'm disappointed that the response was not https://nohello.net/en/.
Re: Data accidentally exposed by Microsoft AI researchers
#10Part of me thought "this is fine as very few could actually download 38TB". But that's not true as it's just so cheap to spin up a machine and some storage on a Cloud provider and deal with it later. It's also not true as I've got a 1Gbps internet connection and 112TB usable in my local NAS. All of a sudden (over a decade) all the numbers got big and massive data exfiltration just looks to be trivial. I mean, obvious…
At the rack rates of $.05/GB, that’d come out to $1,945 per copy that’s downloaded. So not only do you have the breach, you also have a fat bill too.