10 stories tagged data-exposure, newest first.
367 points by gumby | 176 comments
Ars Technica article reporting that Meta's Muse AI agent exposed shared conversations via discoverable subdomain URLs, prompting Meta to suspend the sharing feature.
7 points by tminuslabs | 5 comments
An engineering log post describing how an internal handoff document with an admin bypass string was publicly served from a static site, and why cache purges failed to remove it.
4 points by rvz | 0 comments
TechCrunch article reporting that some Supabase customers have misconfigured databases publicly exposing large amounts of personal data.
526 points by colesantiago | 173 comments
Security researcher blog post describing a misconfigured Firestore database at meeting recorder tl;dv that exposed 181,874 meetings, still unfixed six months after reporting.
722 points by morpheuskafka | 185 comments
A Tell HN post reporting that Fiverr served sensitive customer files via public Cloudinary URLs that are indexed by Google, exposing PII such as tax forms.
737 points by chaps | 448 comments
404 Media article reporting that Flock's AI-powered surveillance cameras were exposed to the internet, letting reporters track themselves through the feeds.
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.
442 points by bearsyankees | 265 comments
A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.
1823 points by __0x1__ | 341 comments
Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.
485 points by udev4096 | 189 comments
A security researcher's blog post describing how they found a flaw in a16z's portfolio.a16z.com site using subdomain scanning and browser inspect element.