Conversation

SO

Not for nuthin’.

BUT

Now that I've seen what was likely the thing everyone who used Snowflake remotely (API/CLI) was doing, ima go out on a limb and say we're barely at the tip of the iceberg when it comes to the # of orgs who have been breached.

Beyond not mandating MFA, Snowflake actually encouraged folks to store creds in plaintext files (the WARNING thing was from the central one).

This is *not* going to end well unless it gets covered up.