pull down to refresh

228 sats \ 5 replies \ @justin_shocknet 26 Oct -420 sats \ parent \ on: Foundation Devices website and emails compromised -- Ongoing Phishing Attack bitcoin

need to update the paradox of privacy to include the paradox of hardware wallets

write
compose
103 sats \ 4 replies \ @optimism 26 Oct

I don't even understand how you can escalate from a self hosted app to cloudflare privilege, but that is probably because I'm a dumdum that doesn't like zero-button CD.

reply
228 sats \ 3 replies \ @justin_shocknet 26 Oct -420 sats

I'm assuming a self-hosted CRM of some kind was using a cloudflare key for mail, so attacker scooped the db and key and was able to use both.

I've never used a Cloudflare anything but I imagine a mail api key can be IP-bound, so presumably the attacker would have used the CRM box to hit the API endpoint as well.

The mention of Cloudflare being completely irrelevant in this context, CRM was pwned along with whatever method it used to send mail.

These CRM DB's being WAN accessible systems seems to be a root factor in all of these, now i'll be thought exercising how shipping details can be encrypted to a militarized box...