Conversation

Notices

1. Embed this notice
   BleepingComputer (bleepingcomputer@infosec.exchange)'s status on Tuesday, 05-Sep-2023 02:16:46 JST BleepingComputer

   Hackers are exploiting two recent MinIO vulnerabilities to breach object storage systems and access private information, execute arbitrary code, and potentially take over servers.

   https://www.bleepingcomputer.com/news/security/hackers-exploit-minio-storage-system-to-breach-corporate-networks/

   • Embed this notice
     feld (feld@bikeshed.party)'s status on Tuesday, 05-Sep-2023 02:18:09 JST feld

     in reply to
     MinIO is a bottomless barrel of bad code practices.
     
     I caught them mocking 200s for requests that fail when you actually execute the API endpoint a few years ago and reported it to them on their Slack, but they insisted their tests didn't need to actually exercise the real code