Leebra security
login register

Thousands of websites are accidentally broadcasting sensitive data

7 months ago by Innerworld to c/security

save

share

report

Researchers have discovered a major security leak hiding in plain sight on the internet that could expose the personal data and financial records of millions of people. In a paper published on the arXiv preprint server, Nurullah Demir of Stanford University and colleagues analyzed 10 million websites to see how often API (application programming interfaces) credentials are exposed. These are digital keys or tokens that enable different software programs to communicate and are often used to process bank payments and access cloud storage.
undefined 2 points 7 months ago

The researchers found 1,748 active, verified credentials from major service providers (including Amazon Web Services, Stripe and OpenAI). These credentials were found publicly accessible within the live code of websites.

I mean, what else is new?

save

path: 0 22872885, hotness: undefined, score: 2, children: 1
towerful 2 points 7 months ago

Yeh, but it's serverless! Where else do the private API keys go, other than in the web page?
\s

save

path: 0 22872885 22876439, hotness: undefined, score: 2, children: 0
security
security

@programming.dev

login for more options
2181
172
89

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

go to feed...