tyteen4a03

joined 7 months ago
sorted by: new top controversial old
Datadog has a security footgun in c/programming@programming.dev
[–] tyteen4a03@lemmy.zip 3 points 2 months ago

So what part of the proposed solutions "wouldn't work"?

Datadog has a security footgun in c/programming@programming.dev
[–] tyteen4a03@lemmy.zip 2 points 2 months ago

Having something is better than nothing! In our case, having connect-src enabled would have avoided the incident.

Datadog has a security footgun in c/programming@programming.dev
[–] tyteen4a03@lemmy.zip 2 points 2 months ago* (last edited 2 months ago) (2 children)

Not sure what you're referring to by "custom endpoints" - if you are a normal Datadog RUM user you can only ever send data to one of the several "sites". There's nothing customizable.

39
Datadog has a security footgun (sheriffcranky.substack.com)