My thought exactly. Is this standard practice with using Supabase to simply expose the production database endpoint to the world with only RLS to protect you?
I think the media is attributing too much to the bats. I was at the Yankees game, and the wind was blowing straight out and hard. Many of the home runs I saw hit would have been fly outs on a day with more normal wind.
I canceled my Apple Music subscription a few years ago after leaving the app open for long times would heat up my computer and use 100% of the cpu. It no longer feels like they have the "it just works" feeling they used to in all of their software.
This is a pretty amazing exploit by the attackers. Either they had access to the pagers during shipment and installed malware or had access to RCE on the devices.
reply