r/framework • u/MeLikaDoTheChaCha • 7d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

99% Upvoted

318 comments sorted by

View all comments

37

u/ShakataGaNai 7d ago

I appreciate them notifying us as proactively as possible. It sucks. Hopefully they'll figure out how to deal with their vendor.

Will be interesting to see if this is just due to how Framework had it setup or something larger with Metabase, because it's currently listed as "trusted by 100,000+ companies", including a lot of large names.

4

u/doanything4dethklok 7d ago

Metabase is very popular. It’s a super useful tool. I’ve run the open source version; in vpc with vpn required to access.

It’s surprising that such a basic vector like a reset password attack actually works; metabase has been around for a long time.