#tldv — Public Fediverse posts

🍝 New Blog Post: tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open

tl;dv's Firestore database has zero tenant isolation on their meetings collection. Any free-tier user can query every meeting on the platform. 181,874 meetings. 84,312 users. 35,003 domains.

What's exposed:

• Creator emails, conference IDs, recording status, timestamps
• Live calls you can join uninvited (I joined 2, including one with the Malaysian Ministry of Education)
• Government meetings from 23 countries
• Corporate meetings from thousands of companies

Reported January 28th. Six months later, still not fixed. CTO never responded. Their Firestore database has better uptime than their inbox.

Full writeup: https://bobdahacker.com/blog/tldv-hack

#InfoSec #BugBounty #ResponsibleDisclosure #Firebase #Security #CyberSecurity #Privacy #DataExposure #APISecurity #tldv #MeetingPrivacy

🍝 New Blog Post: tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide Open

tl;dv's Firestore database has zero tenant isolation on their meetings collection. Any free-tier user can query every meeting on the platform. 181,874 meetings. 84,312 users. 35,003 domains.

What's exposed:

• Creator emails, conference IDs, recording status, timestamps
• Live calls you can join uninvited (I joined 2, including one with the Malaysian Ministry of Education)
• Government meetings from 23 countries
• Corporate meetings from thousands of companies

Reported January 28th. Six months later, still not fixed. CTO never responded. Their Firestore database has better uptime than their inbox.

Full writeup: https://bobdahacker.com/blog/tldv-hack

#InfoSec #BugBounty #ResponsibleDisclosure #Firebase #Security #CyberSecurity #Privacy #DataExposure #APISecurity #tldv #MeetingPrivacy

@RichardMonvoisin En résumé leur positon c'est :
- le porn say le mal absolu ?
OU
- le porn c'est bon pour la santé ?

#tldv

I’m not sure how I feel with these “#AI” #meeting tools, like #TLDV. They are riddled with errors and mistakes and just mine my conversation.

"Jeremy and Yeri acknowledge technical issues and accept them as a part of life. 04:52"

That's definitely not what was said.

I’m not sure how I feel with these “#AI” #meeting tools, like #TLDV. They are riddled with errors and mistakes and just mine my conversation.

"Jeremy and Yeri acknowledge technical issues and accept them as a part of life. 04:52"

That's definitely not what was said.

tl;dv – Die KI-gestützte Meeting-Zusammenfassung

#tldv #ki #transkription #zusammenfassung #meeting #video #kernaussagen #browser #briefing

https://kinews24.de/tldv-die-ki-gestuetzte-meeting-zusammenfassung/

Okay. It's approximately fifty years late, but The Last Dangerous Visions is scheduled to be published in 2024.

Despite it all, I'm actually looking forward to this.

#DangerousVisions #TLDV #SciFi #ScienceFiction

https://file770.com/the-last-dangerous-visions-has-release-date/

Okay. It's approximately fifty years late, but The Last Dangerous Visions is scheduled to be published in 2024.

Despite it all, I'm actually looking forward to this.

#DangerousVisions #TLDV #SciFi #ScienceFiction

https://file770.com/the-last-dangerous-visions-has-release-date/