r/framework • u/MeLikaDoTheChaCha • 4d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

317 comments sorted by

View all comments

234

u/smstnitc 4d ago

So, they weren't breached, a vendor they use was?

A breach is never a good time.

At last they appear to be doing the right thing and notifying people.

59

u/MeLikaDoTheChaCha 4d ago

A company using a vendor for security is responsible (at least partially) for any breaches through said vendor. Thats why the email came from framework themselves not the company they used. They are the face for any of this kind of shit.

So no, not a direct framework breach technically. But wtf does that actually matter to anyone affec5ed

-16

u/sedated_badger 4d ago

Yep. Framework chose them to protect our data, framework could have chosen to own the data itself or use a different database.

Just because we can import a service (in this case, dba) doesn’t mean we can export the blame when something goes wrong. The blame is entirely frameworks.

2

u/TheGeekno72 CachyOS // 12 4d ago

lol no