6 ms·

How does the app read the variable if it can't be read after you input it? Or do they mean you can't view it after providing the variable value to the UI?

• ctmnt 5mo ago
  They mean the latter. Very unclear how that translates to meaningful security.
  • btown 5mo ago
    You could have a meaningful wall between administrative/deployment interface backends and the customer server backends - only the latter get access to services that have the private keys to decrypt the at-rest storage of secure variables, and this may be fully isolated to different control planes. So it becomes write-but-not-read. But that's just a bare-minimum defense-in-depth. The fact that an attacker was able to access the insecure variables, and likely the names of secure variables, is still horrifying.
    • ctmnt 5mo ago
      I agree / hope that’s what they meant. It seems disingenuous, though, to describe it as unreadable, since obviously something has to read it to bake it into the deploy. And given their apparent lack of effective security boundaries in one area, why should we assume that they’ve got the deploy system adequately locked down? It’s not like I had a ton of trust in them before, but now they’ve lost almost all credibility.