Ideally they'd report it so that password managers could warn everyone, but with... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Alex3917 on July 26, 2020 \| parent \| context \| favorite \| on: New ‘Meow’ attack has deleted almost 4k unsecured ... Ideally they'd report it so that password managers could warn everyone, but with just the database URI there isn't necessarily any obvious way to know what domain or business its associated with.

_abox on July 26, 2020 | [–]

Doesn't really matter, as long as the credential is exposed, users can be warned. No matter where it came from.

wtracy on July 26, 2020 | [–]

If the attacker can write to the DB, then they can add entries to every table with the string "Hey your database is unsecured!"

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact