Metabase security incident post-mortem: July 2023

by louis-paulon 8/4/23, 3:29 PMwith 1 comments
by rudasnon 8/4/23, 7:08 PM

I'm not a Metabase user or customer but I've been following them along for a few years.

After all these events and the way they handled them, I'll keep them on my radar for when the need arises. No hard feelings, well done!

Also, they've been telling people from the start not to use H2 as a database and seems like they kept supporting it for ease of use (during onboarding/trying out the product).

Maybe now it's a good time for the to consider sqlite for that purpose.