logoalt Hacker News

lastdongyesterday at 9:03 AM3 repliesview on HN

This is mind-blowing, and it defies all security common sense. Changing global API keys permissions? Come on! We’re accustomed to seeing issues like this from Redmond but didn’t expect it from Google.


Replies

bob1029yesterday at 9:57 AM

Out of all of the cloud providers, I find Microsoft's authentication stack to be the most legible and stable. Everything else really sucks though.

show 1 reply
sublimefireyesterday at 5:34 PM

It shows their red teams were preoccupied with something else. Even the primary rejection of this issue by G themselves shows some serious ignorance.

jccx70yesterday at 9:34 AM

[dead]