Three cybersecurity researchers discovered close to 19 million plaintext passwords exposed on the public internet by misconfigured instances of Firebase, a Google platform for hosting databases, cloud computing, and app development.

  • Fermiverse@feddit.de
    link
    fedilink
    English
    arrow-up
    9
    ·
    8 months ago

    When plain text passwords are allowed to even entering a database then there was something totally wrong in the first place.

  • RamblingPanda@lemmynsfw.com
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 months ago

    I like it when there’s a clear answer to the question “why hire you? The nephew of my gardener can program that for a tenth of your price!”

    I don’t know, why would you?

  • Flyberius [comrade/them]@hexbear.net
    link
    fedilink
    English
    arrow-up
    1
    ·
    8 months ago

    I’m a bad programmer, but even I wouldn’t trust my firebase with storing credentials. Those firebase rules are not robust enough. The hackiest thing ever