Post #4242056
2026-07-30 13:32 UTC
Replies (8)
-
@huronbikes@cyberplace.social 2026-07-30 14:07
@campuscodi@mastodon.social my "yes I have a key that allows access to everyone's database don't worry about it" t-shirt is causing a lot of questions already answered by the t-shirt.
-
@grumpydad@infosec.exchange 2026-07-30 15:06
@campuscodi@mastodon.social Made by Microsoft. Hmmmm....
-
@SpaceLifeForm@infosec.exchange 2026-07-30 21:44
@campuscodi@mastodon.social I'll bet AWS has the same feature.
-
@muddle@infosec.exchange 2026-07-30 22:44
@campuscodi@mastodon.social cough Backdoors, but only for good guys/law enforcement
-
@adamshostack@infosec.exchange 2026-07-30 23:27
@campuscodi@mastodon.social No, there's a second master key. https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough (2021)
-
@WooShell@chaosfurs.social 2026-07-31 07:09
@campuscodi@mastodon.social Yet another demonstration that putting your data on other people's computers is a bad idea..
-
@Ralph@hear-me.social 2026-07-30 14:23
@campuscodi@mastodon.social #alttext CosmosEscape: Taking Over Every Database in Azure CosmosDB Any region | Any API flavor | Including private databases Exploits CosmosEscape Attacker (using) Cosmos Master Key (opens) Azure Cosmos DB Backend US East Org A DBS Europe Org B DBS Asia Org C DBs US West Internal Microsoft DBs Brazil Internal Azure DBS (by) WIZ Research
-
@desantis@mastodon.bida.im 2026-07-30 14:40
@campuscodi@mastodon.social Remember when “they” said let’s put everything in the cloud? Tools, all of them.