Hacker News Reader

Comment by proactivesvcs | Hacker News Reader

BBC News report of a substantial hack of Santander bank; linked to Snowflake. https://www.bbc.co.uk/news/articles/c6ppv06e3n8o

View on HN

BBC just linked back to Hudson Rock's allegation FWIW, they don't have any independent confirmation

Great, so these companies do not give a flying fuck about their customer data in making sure the data stored at cloud storage companies are end to end encrypted.

To think these random cloud storage companies can access your bank information is utterly shocking.

> To think these random cloud storage companies can access your bank information is utterly shocking.

Honestly this sort of thing shouldn't be shocking at all.

Not surprised at all. Doesn't even depend on cloud vendors - I'm thinking back to the 2023 MOVEit vulnerability which resulted in the release of a ton of customer info from banks' own internal infrastructure.

It’s been a while since I’ve been a Snowflake customer, but I do recall that Snowflake has a mode where the customer owns their own encryption key for their data. Snowflake employees (even admins with the highest access) have no access to the customer’s data unless the customer grants explicit access. It’d take a pretty serious breach on their compute notes to exfiltrate data.

https://docs.snowflake.com/en/user-guide/security-encryption...

Can a tool like Snowflake work if it doesn’t have access to the unencrypted data?

No. E2E encryption doesn't really apply here.

lol everyone in this thread is wrong about everything basically.

Let them be enraged. Great time to buy more SNOW :D

Reply on news.ycombinator.com