Remix.run Logo
▲ rithdmc 3 hours ago

Does Snowflake allow you to push messages via in-app messaging? I didn't think it did. This breach might be a little broader than reported.

▲jmkni 2 hours ago | parent [-]

I've seen comments from people claiming they used to work at Asos saying that they have a Braze/Snowflake integration, and the push notification was sent from Braze

▲potatoproduct 2 hours ago | parent | next [-]

Yep, my first thought is they probably are probably getting the candidate push notifications from snowflake.

▲rithdmc 2 hours ago | parent | prev [-]

That'll do it. Thank you.

▲jmkni 2 hours ago | parent [-]

Speculating, but it could also be they don't actually have Braze access, but there is a table in snowflake to schedule push notifications

Or they are lying about having snowflake access and only actually have Braze

Lots of fun possibilities!

▲iamacyborg an hour ago | parent [-]

As far as I know, the Braze/Snowflake integration is just to pull contact data and event feeds into Braze and to sync out performance data.

If they’ve gained access to Braze presumably they’ll have access to the contact db stored in there along with whatever other information is pushed in to support segmentation and personalisation but it’s definitely limited in scope vs just gaining access to their snowflake db.

This assumes they implemented things sanely with the db user for Braze having limited access rights…