Post #4258194
2026-07-30 23:56 UTC
Replies (4)
-
@sharkfie@infosec.exchange 2026-07-31 00:39
@wdormann@infosec.exchange Microsoft has now fully remediated the issue, including eliminating the Cosmos Master Key okay but what was it for? I'd never assume bad intentions from our favorite company but it's weird
-
@401matthall@mastodon.xyz 2026-07-31 13:17
@wdormann@infosec.exchange ... Is it to update the collation of all the tables in all the databases at once when unicode adds too many characters to the spec? That's gotta be it. ... 👀 ... Right?
-
@_aD@hachyderm.io 2026-07-31 13:59
@wdormann@infosec.exchange Blog post: https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db Holy moly, somehow microsoft have fucked up so badly I am physically aghast.
-
@log@mastodon.sdf.org 2026-07-31 14:25
@wdormann@infosec.exchange In physically keyed locks, a master key has different pin height from the lock-specific key. There exists a limit on the number of keys that can open a single pin-tumbler, directly derived from the number of little cylinders you can stack up in a pin bore. So we tend to think that there is only ever one master key. But there is no such physical limitation on a digital cryptographic lock. Encrypt your sensitive data long before you ever touch the cloud. (But don't roll your own.)