Small tech startup cutting corners on security? Color me shocked /s
this post was submitted on 12 Feb 2024
99 points (99.0% liked)
Technology
59440 readers
3489 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
They gambled their customers' personal info and lost
This is the best summary I could come up with:
The startup that develops the phone app for casino resort giant WinStar has secured an exposed database that was spilling customers’ private information to the open web.
The startup left one of its logging databases on the internet without a password, allowing anyone with knowledge of its public IP address to access the WinStar customer data stored within using only their web browser.
Sen shared details of the exposed database with TechCrunch to help identify its owner and disclose the security lapse.
A review of the exposed data by TechCrunch found an internal user account and password associated with Dexiga founder Rajini Jayaseelan.
The exposed database contained rolling daily logs dating back to January 26 at the time it was secured.
WinStar’s general manager Jack Parkinson did not respond to TechCrunch’s emails requesting comment.
The original article contains 531 words, the summary contains 134 words. Saved 75%. I'm a bot and I'm open source!