I asked Meta’s Muse for its filesystem and it sent me 6.8 GB

18 days ago by cm0002 to c/programmer_humor

I asked Muse to archive the files it could see and send them to my Google Drive. It did.

smeg 89 points 18 days ago

There were also SSH key files.

I’m not publishing the archive, keys, or session logs.

I submitted the report and findings using Meta’s bug bounty program. Meta marked the report “Not Applicable.”

Guess they don't care if you publish the SSH keys then?

path: 0 25999597, hotness: undefined, score: 89, children: 3

docktordreh 21 points 17 days ago

They've probably rotated the keys since they were notified of the security breach.

But yes, companies that act this way undermine the resolve to disclose their security vulnerabilities.

path: 0 25999597 26004462, hotness: undefined, score: 21, children: 0

drmoose 10 points 17 days ago

Ssh keys to what? If the key is used for user operations, not internal then there's no security breach here other than deobfuscation.

path: 0 25999597 26004390, hotness: undefined, score: 10, children: 1

smeg 13 points 17 days ago

Guess they'll have to publish them to find out

path: 0 25999597 26004390 26005076, hotness: undefined, score: 13, children: 0

civ 27 points 18 days ago

Time to try and convince it to set up a reverse SSH tunnel

path: 0 25997239, hotness: undefined, score: 27, children: 1

KairuByte 1 point 15 days ago

Sounds like that’s one of the few things it refuses to do. I suppose it may be possible with a little more priming though.

path: 0 25997239 26046494, hotness: undefined, score: 1, children: 0

MonkderVierte 21 points 18 days ago

Soo, was that incompetence, negligence or misled belief, trust?

path: 0 25996398, hotness: undefined, score: 21, children: 2

RonSijm 6 points 17 days ago

Yes

path: 0 25996398 26004039, hotness: undefined, score: 6, children: 1

richieadler 3 points 17 days ago

I almost heard Kosh's chimes beforehand.

path: 0 25996398 26004039 26010588, hotness: undefined, score: 3, children: 0

cinoreus 15 points 17 days ago

Mine bitcoin on their server just out of spite.

path: 0 26003257, hotness: undefined, score: 15, children: 0

belluck 7 points 17 days ago

This is hilarious

path: 0 26007153, hotness: undefined, score: 7, children: 0

programmer_humor

programmer_humor

@programming.dev

login for more options

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.

go to feed...

programmer_humor

programmer_humor

@programming.dev

login for more options

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.

go to feed...