Some 492,000 MinIO Hosts Found Online, Exposing Object Storage Risks

·1 views

A ZoomEye index snapshot from October 2026 found 492,113 hosts whose page titles match MinIO, versus 261,617 by application fingerprint. The gap is attributed to the product's console and API surfaces responding differently to scans, plus MinIO being bundled inside other software. The counts reflect detectable fingerprints, not open buckets, since public indexes cannot enumerate bucket contents. The analysis stresses that object stores accumulate historical data such as old backups and dumps, that bucket policies are easy to misconfigure, and that anonymous reads leave few traces. Organisations are advised to audit their own address space, distinguish console exposures (a credential risk) from API exposures (a data risk), and check log retention.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

John Carmack Discusses the Goose Language's Multiple Data Stacks and Relative References

John Carmack shared his thoughts on the Goose programming language via a post on X. The discussion centers on the language's use of multiple data stacks and its approach to relative references. The source material is a brief link post with a Hacker News discussion thread, which had received 9 points and no comments at the time of capture. The available text does not include Carmack's full remarks, so the specific technical details of his critique are not described here.

0 comments Read more at Hacker News

ProgrammingHacker News ·

PHP Foundation Says It Is Under-Funded, With Only One Full-Time Staffer

The PHP Foundation, the organization that supports development of the PHP programming language, is reportedly running with just one full-time employee. Its director says the group is under-funded for the scope of work it oversees. The statement points to ongoing funding constraints for open-source infrastructure that many web applications depend on. The article linked from the source is a Reuters report, and the available details are limited to this headline and link summary. Further specifics such as budget figures or planned remedies are not included in the available text.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Xplora 1.0.0 Released With WordPress 7.1 Engine and Custom Avatars

Version 1.0.0 of Xplora is now available to users. The update adopts WordPress 7.1 as the platform's underlying engine. Users can now upload and edit custom avatars instead of depending on Gravatar. The release also includes fixes and functional improvements to user profiles, along with security adjustments and general stability work. The developers describe this version as a new step in Xplora's ongoing development.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

cloudg: open-source CLI maps and audits AWS, Azure and GCP resources as a graph

A cloud security practitioner has released cloudg, an MIT-licensed Python tool that builds a connected graph of assets across AWS, Azure and GCP. Unlike scanners that produce flat lists of misconfigurations, cloudg records typed relationships between resources, such as a storage bucket invoking a Lambda function or a function assuming a role. The tool can also run Prowler, ScoutSuite, Checkov and Trivy over the same inventory, attaching each finding to the asset it concerns and mapping results to 28 compliance frameworks. Users can query dependencies with the deps command, and the cloudg run pipeline produces an offline HTML report with a topology view and findings table. The current release on PyPI is version 0.6.1, and the project requires Python 3.11 or newer.

0 comments Read more at DEV Community