Discussion
Loading...

Post

Log in
  • Sign up
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Substandard Nerd
Substandard Nerd
@substandardnerd@mastodon.social  ·  activity timestamp 13 hours ago

Spectacular!

Full text of Wiz write-up here:

https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys

#AI #VibeCoding #MoltBook #LLM

2 media
Tweet from @MattPRD displayed on xcancel.com reading "I didn't write one line of code for @moltbook.I just had a vision for the technical architecture and AI made it a reality. We're in the golden ages. How can we not give AI a place to hang out.""
Tweet from @MattPRD displayed on xcancel.com reading "I didn't write one line of code for @moltbook.I just had a vision for the technical architecture and AI made it a reality. We're in the golden ages. How can we not give AI a place to hang out.""
Tweet from @MattPRD displayed on xcancel.com reading "I didn't write one line of code for @moltbook.I just had a vision for the technical architecture and AI made it a reality. We're in the golden ages. How can we not give AI a place to hang out.""
Section of a screen cap of wiz.io reading "We identified a misconfigured Supabase database belonging to Moltbook, allowing full read and write access to all platform data. The exposure included 1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents. We immediately disclosed the issue to the Moltbook team, who secured it within hours with our assistance, and all data accessed during the research and fix verification has been deleted."
Section of a screen cap of wiz.io reading "We identified a misconfigured Supabase database belonging to Moltbook, allowing full read and write access to all platform data. The exposure included 1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents. We immediately disclosed the issue to the Moltbook team, who secured it within hours with our assistance, and all data accessed during the research and fix verification has been deleted."
Section of a screen cap of wiz.io reading "We identified a misconfigured Supabase database belonging to Moltbook, allowing full read and write access to all platform data. The exposure included 1.5 million API authentication tokens, 35,000 email addresses, and private messages between agents. We immediately disclosed the issue to the Moltbook team, who secured it within hours with our assistance, and all data accessed during the research and fix verification has been deleted."
wiz.io

Hacking Moltbook: AI Social Network Reveals 1.5M API Keys | Wiz Blog

Learn how a misconfigured Supabase database at Moltbook exposed 1.5M API keys, private messages, and user emails, enabling full AI agent takeover.
  • Copy link
  • Flag this post
  • Block

Indieweb Studio

This is a relaxed, online social space for the indieweb community, brought to you by indieweb.social.

Please abide by our code of conduct and have a nice time!

Indieweb Studio: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.2-alpha.7 no JS en
Automatic federation enabled
Log in Create account
  • Explore
  • About
  • Members
  • Code of Conduct