Teen researcher found unsigned-token flaw in Microsoft's internal Titan service, with 17 trillion rows reachable
Faav says a missing JWT signature check exposed an analytics environment estimated at 17.3 trillion rows; Microsoft shut the API after his September 5th report.
By Ryan Merket · Published
Faav says a missing JWT signature check exposed an analytics environment estimated at 17.3 trillion rows; Microsoft shut the API after his September 5th report.