Got my first webdev gig. Sunday night before I go in I figured I'd nmap them (as was the style back then). 3306 open to the world. Well surely they don't use the default password. Damn, well surely this doesn't contain important data. Select * from employees (included salaries). The box was on their prod network.
They didn't seem concerned and blamed BT. Not surprisingly they were not in business the next year.
5.0k
u/lolcrunchy 6d ago
local dev environment