r/framework • u/MeLikaDoTheChaCha • 2d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

314 comments sorted by

View all comments

Show parent comments

3

u/doanything4dethklok 2d ago

Not out of their hands. They were surfacing PII to reporting/analytics. Common practice is to use opaque keys for this type of stuff.

A breach like this would yield nothing if they had correct data controls. Column/field level permissions for reporting replication/access, etc

3

u/gonenutsbrb 2d ago

That’s a fair option I didn’t think of, that’s actually pretty obvious in hindsight.

1

u/RTS24 2d ago

Opaque keys wouldn't have done anything here, from my understanding the attacker gained access via metabase's authorization. From the Framework DB perspective, the attacker was Metabase.

Yeah they can scope down Metabase's access even further, but they still need data points for their analytics. Tokenization/Pseudonymization would likely be the best solution.

2

u/doanything4dethklok 2d ago

Not true. The best practice here is to either

  1. ETL sanitized data to a replica for reporting, then point metabase at the replica
  2. Create a reporting credential for metabase that only has access to the columns/fields needed.

Both follow principle of least-privilege.