7 ms·

Ha, I was just about to go in here and say the same thing. "Fortunately" some "white hat" hacker contacted us last year about another Metabase exploit. I gave

by tedeh 3y ago

Ha, I was just about to go in here and say the same thing. "Fortunately" some "white hat" hacker contacted us last year about another Metabase exploit. I gave him a 30 USD tip and ended up doing exactly what you are suggesting. Now I'm glad that means I don't need to interrupt my vacation to fix this thing right now.

fuomag9 3y ago
Here in Italy you get lucky if the company is not suing you :(
- konschubert 3y ago
  EDIT: I misunderstood.
  - selimco 3y ago
    We have the same https://www.zeit.de/digital/datenschutz/2021-08/cdu-connect-app-it-sicherheit-lilith-wittmann-forscherin-klage https://www.zeit.de/digital/datenschutz/2021-08/cdu-connect-...
    - konschubert 3y ago
      I thought gp was talking abhobt their employer suing them for bugs they created.
  - calessian 3y ago
    That’s simply not true, sadly; you’re very much reliant on the company not attempting to sue you. Counter examples (not implying these have been successful, but it is also not unheard of to have the police show up at your door and collect all computers/phones etc. to investigate) - https://www.golem.de/news/connect-app-cdu-verklagt-offenbar-hackerin-nach-melden-von-luecken-2108-158647.html https://www.golem.de/news/connect-app-cdu-verklagt-offenbar-... - https://www.heise.de/news/Modern-Solution-Anklage-gegen-Aufdecker-von-Sicherheitsluecke-gescheitert-9182813.html https://www.heise.de/news/Modern-Solution-Anklage-gegen-Aufd...