Discover and read the best of Twitter Threads about #ibmcloud
Most recents (2)
We found a Remote Code Execution vulnerability in every #PostgreSQL database in #IBMCloud 😱
Here is how we did it: 🧵
#HellsKeychain
Here is how we did it: 🧵
#HellsKeychain
We set up a PostgreSQL instance in IBM Cloud and tried to execute code using the 'COPY FROM PROGRAM' statement. Unfortunately, this failed due to insufficient privileges. We were blocked! 🚫
We reviewed all IBM Cloud's proprietary functions that had the 'security definer' flag (meaning they will run as superuser). One of these functions had a SQL Injection vulnerability that we were able to exploit:
To celebrate #InternationalWomensDay , I'd like to acknowledge a few of the fearless #WomenInTechnology that I am lucky to be surrounded by. I am so grateful to have these women in my life to motivate, support and inspire me.
💡I'll start with @beeonaposy because I got this idea from a similar post she did a few years ago.
Caitlin is a lead #DataScientist, co-founder of @RLadiesAustin, advocate for women in tech, mom and all-around inspiration. Check out her blog: caitlinhudon.com/about/
Caitlin is a lead #DataScientist, co-founder of @RLadiesAustin, advocate for women in tech, mom and all-around inspiration. Check out her blog: caitlinhudon.com/about/
🩺 @ValueVictoria is a leader in the healthcare data field. She co-founded @RLadiesAustin, which has served as a great motivation and support system for women in #ATXData to connect and learn.
