Typespace Media [en]
Photo
click to show
click to show
A 16-year-old student hacked Microsoft’s internal system and got admin access to databases containing 17.3 trillion rows of data.
He built the Antares chatbot, and with its help found an authentication flaw in Titan: the system accepted an unsigned token, so the student simply specified the user as admin and gained the ability to run SQL queries.
Microsoft thanked him, fixed the vulnerability, and paid him a $5,000 reward.
@typespace_ai
3 · 930 ·