16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

A flaw in Titan, an in­ter­nal Mi­cro­soft analy­tics ser­vi­ce, could have let an at­tac­ker read em­plo­yee re­cords and Bing search analy­tics, a 16-year-old se­cu­rity re­sear­cher has dis­clo­sed. The re­sear­cher, who goes by Faav, found that Titan did not ve­rify the sig­na­tu­re on login to­kens. That let him pose as the ser­vi­ce’s ad­mi­nis­tra­tor and run SQL que­ries against 17 con­nec­ted da­ta­ba­ses hol­ding an es­ti­ma­ted 17.3 tri­llion rows. He did this with the help of An­ta­res, an … More → The post 16-year-old re­sear­cher breaks into Mi­cro­soft analy­tics ser­vi­ce with ac­cess to 17 tri­llion rows of data ap­pea­red first on Help Net Se­cu­rity .