TiDB leak: PingCAP documented its own multi-tenant isolation flaws back in 2022
SumitGup · x · 2026-10-21
Sam Lambert published "The TiDB leaks" revealing that PingCAP's own security team documented exactly what was wrong with the multi-tenant isolation of its TiDB cloud product back in 2022. Commenters note that customers affected by the isolation issues include unicorns, decacorns, and public companies, making this a significant cloud database security incident.
More from Safety
- Intermediate CA 'leak' with private key 4 lets users root smart speakers — basedjensen · 2026-10-21
- 'Good bots doing evil takes alignment': a pointed jab at AI safety research — jessi_cata · 2026-10-21
- Critical PHP RCE Leaked Before Patch, Fueling Fears of Open-Source AI Regulation — basedjensen · 2026-10-21
- X's Android in-app browser still trusts emudhra certs, researcher warns — basedjensen · 2026-10-21
- Keychain screenshot of "trustMeSaar" CA mocks rogue Indian certificate authorities — kingslyj · 2026-10-21
- eMudhra CA trust collapse breaks SSL as iPhone remote attacks and PHP CVE loom — basedjensen · 2026-10-21