There is nothing unreasonable at all in "beating up on Musk and his companies" after any of countless things he's said and done, and I don't mean the merely eccentric stuff like giving his kid a weird name.
Is he some coffee shop owner just minding his own business never said an offensive word to anyone and the world just decided "F this rando"?
Eh, that was posted in another thread. It's really benign, and doesn't leak anything other than Tesla's website is a Drupal site... which was already known and easy to discover without the "leak".
I would not say these "leaks" are necessarily incompetence like some have been quick to assume. These "leaks" don't really leak anything at all... and it's possible their team reviewed the files and determined "who cares".
It's also pretty likely Tesla's staff has very little to do with the website, other than content. It's a Drupal site after all - some 3rd party might be in charge of hosting it, making this mistake theirs to own.
leaking info about your site / app is only benign until a motivated attacker finds and exploits it
aside from being a potential security risk, it is downright embarrassing and sloppy, especially for a multi-billion $ company with a leader who is super vocal about "hard-core coding"
that we know of, at this time, sure. something isn't exploitable until you find an exploit, and then it's exploitable. knowing file paths for key configs on disk can't possibly help that equation.
19 comments
[ 2.4 ms ] story [ 32.6 ms ] threadhttps://twitter.com/wongmjane/status/1596257280970067969
Guess it's Drupal
There is nothing unreasonable at all in "beating up on Musk and his companies" after any of countless things he's said and done, and I don't mean the merely eccentric stuff like giving his kid a weird name.
Is he some coffee shop owner just minding his own business never said an offensive word to anyone and the world just decided "F this rando"?
No. So, that attempt was misplaced.
I would not say these "leaks" are necessarily incompetence like some have been quick to assume. These "leaks" don't really leak anything at all... and it's possible their team reviewed the files and determined "who cares".
It's also pretty likely Tesla's staff has very little to do with the website, other than content. It's a Drupal site after all - some 3rd party might be in charge of hosting it, making this mistake theirs to own.
aside from being a potential security risk, it is downright embarrassing and sloppy, especially for a multi-billion $ company with a leader who is super vocal about "hard-core coding"
musk fan or not that's pretty ironic
Literally nothing learned from these "leaks" that wasn't already known.