Microsoft AI team accidentally leaks 38TB of private company data::undefined

    • Stovetop@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      2 years ago

      Depends on what that 38TB is, I suppose. 38TB of internal documents, financials, communications is a lot. 38TB of media could be, like, a single work-in-progress Xbox promo montage given the large file sizes and version control/redundancy of media production workflows.

      A modern Pixar movie is several hundred terabytes of production data, for example.

  • exohuman@programming.dev
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 years ago

    Wiz says that this occurred as a result of an Azure feature called Shared Access Signature (SAS) tokens, which is “a signed URL that grants access to Azure Storage data.”

    The URL gave full access to read and write all data in the Azure Storage. This is so obvious a security hole. This “feature” should never be. If you are going to use signed urls, then implement them so that they expire after 24 hours or something.

  • ieightpi@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 years ago

    So this is connected to the leaks that were going around about xbox earlier this week eh?

  • lawrence@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 years ago

    “The exposed data included full backups of two employees’ computers. These backups contained sensitive personal data, including passwords to Microsoft services, secret keys, and more than 30,000 internal Microsoft Teams messages from more than 350 Microsoft employees.”