‹ BackHN Continuity

Thread

I could've accessed 17T Microsoft records

322 points · 128 comments · luispa

  1. throwaway2037 · · focus · HN ↗

        > Hey! I’m Faav. A little over a year ago, when I was 15, I published Break into any Microsoft building: Leaking PII in Microsoft Guest Check-In, my first Microsoft write-up. I’m 16 now, and this one is a little bigger.
    
    Damn, these guys got schooled by a 15 year old! Say less...
    1. bsoqk · · focus · HN ↗
      You assume that whoever was responsible for the implementation of this feature cares in the slightest beyond “it seems to work”.
      1. ocdtrekkie · · focus · HN ↗
        Physical security vendors usually stop exactly there. I can't count how many vendors responsible for badge systems shut off the Windows Firewall just because it’s easier than adding a rule.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.