Just got this email from Framework:

Dear Valued Framework Customer,

We are writing to inform you of a data breach at our business intelligence database provider Metabase that resulted in an attacker accessing customer names, email addresses, phone numbers, and addresses. Your information was in the database that was accessed in this breach. This breach did not include order or payment information.

We have full details on the incident below. We are deeply sorry for this breach of information, and are reviewing and improving our methodology for data storage in external database vendors.

We are also in the process of notifying the regulatory authorities in each region where relevant regulations exist. Note that while regulations in most regions do not require notification for breaches of names, email addresses, phone numbers, and addresses, we are sending this email to you regardless to ensure you have visibility and can take any actions needed.

What happened?

On August 6th, 2026 at 9am Pacific Time, Metabase notified us of a breach of their systems with the following email message:

On Monday, August 3, we discovered that Metabase Cloud was attacked by someone utilizing an unknown (“0-day”) security vulnerability in versions 1.58 and above. We immediately blocked the endpoints used for the attack, then quickly identified and patched the vulnerability. We notified law enforcement, and we have engaged with a third party forensics firm to conduct an independent investigation.

Your instance of Metabase was vulnerable to this 0-day. Therefore, to protect your company, we recommend you:

Rotate the credentials for every database connected to your instance; and

Review the admin accounts on your instance and remove anything you don't recognize.

We also discovered that the attacker was able to gain access to your instance. We created a report on the actions we believe the attacker took on your instance, which includes log files, and which you can get from the Metabase Store at [removed url].

(If you do not have access to the Metabase Store, are having issues accessing the report, or do not want to click on a link in an unexpected email, you can log into your instance directly and reach us at Help > Get help in the grid menu in the upper right hand corner. We'll confirm this message is from us and email you the report.)

This report is based on our own application logs. We did not query or read the data in your connected databases.

Depending on the jurisdictions in which you operate and kinds of data your instance connects to, you may have notification obligations under applicable laws. If you have concerns in this regard, we recommend you assess potential notification obligations with your company’s legal or compliance experts.

We regret any inconvenience this incident may cause you, and we are here to support you. If you have questions, please reply to this email or email us at [removed email address], and we'll get back to you as quickly as we can.

Sameer Al-Sakran

Founder and CEO

Metabase

We immediately investigated the logs Metabase provided to us and confirmed that our database instance was accessed by the attacker. We confirmed that the following information was accessed:

• Full name
• Email address
• Login IPs
• Billing and shipping address information
  • Country
  • Address
  • City
  • State
  • Zip code
  • Phone number
  • Company

For Framework for Business customers, we are investigating whether the following information may additionally have been accessed:

• Company
• Phone
• VAT
• EIN
• Billing Email
• No other personally identifiable information, order information, or payment information was accessed.

Note that Metabase has additionally flagged:

Important: This is a preliminary update based on our current knowledge.

We are working with a third-party forensic investigation firm to understand the full nature and scope of the event.

We are providing you this interim update in advance of completing our investigation to allow you to better understand any potential impact and secure your data.

Our investigation is ongoing and the information shared now is preliminary.

Please look at the application logs as well as the queries executed that are provided as separate files in the zip file for detailed activity and a potential timeline.

We’re providing you notice of the breach in the meantime to ensure you have the earliest possible visibility. In the event Metabase notifies us of additional information that impacts you, we will send a follow-up email.

What was done to resolve the issue?

After we were notified of the breach by Metabase, we rotated credentials on all databases associated with our Metabase instance and confirmed that there were no changes in admin access or access to systems outside of Metabase.

What steps have you taken to ensure this doesn’t happen in the future?

We are evaluating the breadth and depth of data shared with business intelligence platforms, and scoping down their access to only the columns required for analysis.

Nirav Patel and the Framework Team

What have you been listening to this week? You don't need to do a 6000 word review if you don't want to, but please write something! If you've just picked up some music, please update on that as well, we'd love to see your hauls :)

Feel free to give recs or discuss anything about each others' listening habits.

You can make a chart if you use last.fm:

http://www.tapmusic.net/lastfm/

Remember that linking directly to your image will update with your future listening, make sure to reupload to somewhere like imgur if you'd like it to remain what you have at the time of posting.

Moments in your travels that took place during layovers, while waiting for your flights, checking in your baggage, etc.

The stories can be funny, sad, unexpected, interesting, etc.

Tell us what happened and what made it so memorable.

Add awesome game deals to this topic as they come up over the course of the week!

Alternately, ask about a given game deal if you want the community’s opinions: e.g. “What games from this bundle are most worth my attention?”

Rules:

• No grey market sales
• No affiliate links

If posting a sale, it is strongly encouraged that you share why you think the available game/games are worthwhile.

All previous Save Point topics

If you don’t want to see threads in this series, add save point to your personal tag filters.

This is a recurring post to discuss programming or other technical projects that we've been working on. Tell us about one of your recent projects, either at work or personal projects. What's interesting about it? Are you having trouble with anything?

Tildes is a very serious site, where we discuss very serious matters like duckduckgo, grip and high fives. Tags culled from the highest voted topics from the last seven days, if anyone was noticing.

But one of my favourite tags happens to be offbeat! Taking its original inspiration from Sir Nils Olav III, this thread is looking for any far-fetched offbeat stories lurking in the newspapers. It may not deserve its own post, but it deserves a wider audience!

I've been thinking about getting into cast iron cooking. I need a new skillet, and I've seen recommendations for cast iron, but some things seem daunting:

• Seasoning. How bad is it really? Did you purchase a pre-seasoned pan and just cook with it? Do you re-season occasionally? How often? What oil do you use? What is your process?
• Cleaning. How do you clean your skillet? Soap and water? How do you know when you are done cleaning? What materials do you use?
• Unknowns. What did you not know until you started cooking with cast iron? Any surprise benefits/costs?

Have any of you used cast iron, then returned to Teflon or stainless steel after being disappointed in the experience? What are the biggest differences between cooking with cast iron and other materials?

Considering that non-stick manufacturing poses environmental risks, and iron may provide a net positive effect for folks needing more iron in their diet, it seems like this is a natural way to go.

As part of a weekly series, these topics are a place for users to casually discuss the things they did — or didn't do — during their week. Did you accomplish any goals? Suffer a failure? Do nothing at all? Tell us about it!

Have you watched any TV shows recently you want to discuss? Any shows you want to recommend or are hyped about? Feel free to discuss anything here.

Please just try to provide fair warning of spoilers if you can.

What have you been doing lately for your own fitness? Try out any new programs or exercises? Have any questions for others about your training? Want to vent about poor behavior in the gym? Started a new diet or have a new recipe you want to share? Anything else health and wellness related?

Pretty basic question I know, figure since people come and go the answers could change

Mine are Made in Abyss, Blame, Girl's Last Tour

Edit: almost forgot: Yotsuba to! Most wholesome and hilarious thing I've read!

Particularly interested if it has already impacted your life, or scrapped any plans or influenced where you decided to live.

Anybody else chose their current/ next home because of lower natural disasters risk or climate change resilience?

Everyone's definition of obscure is different, so I wouldn't look twice at someone posting Ariana Grande or Ed Sheeran! It's always nice to listen to some new music, and I find that lesser known songs are a great way to break into new genres.

I'm looking to replace my current mechanical keyboard which has a few problems. If anyone has recommendations I would appreciate it.

Here is what I'm looking for:

• Mechanical switches
• USB C and bluetooth.
• Smaller size (no keypad)
• Clicky but not too loud. I think I currently have "brown" switches which are good.
• Backlit (but not colorful unless I'm able to set it to something muted or single-colored)
• Works with mac, pc, linux, and maybe tablets

I don't care very much if there is a battery in the unit as long as it can switch to bluetooth while plugged into usb.

I went to mechanicalkeyboards.com and looked around and got a bit overwhelmed. Looks like the prices are mostly under $200 which would be ok.

What went wrong with my current keyboard:
It's an EPOMAKER TH80 pro. The size is good, the features are good, and the keyboard feel is good. But the battery went dead so it has to be plugged in all of the time, and several of the keys get double presses at random so I have to backspace a lot.

Thanks!

I could still turn it on for now but there's a warning that it's no longer supported. I have ADHD and I can't live without cosmetic filtering. (I'm not tech-oriented enough to know if that's the right term for it. I mean the ability to point at elements on a page and say "take this off for me".)

I use the function to remove YouTube shorts, recommendations, the block that nudges me to get Premium and probably a gazillion other bells and whistles that I've already forgotten about. I wouldn't use YT at all if I couldn't do this. Same deal for Reddit.

I also use it to remove moving graphics and other things on some web stores that break my focus. I wouldn't be able to get through my workday without that option. I have to source countless small items for my business from sites that are already complex enough to navigate without any additional distractions. The site designers likely have no clue how much worse their animated banners etc. make my day. That's okay. They can't take everything and everyone into account at all times. But I must be able to adapt environments to be kinder to my brain if I am to retain my executive function so I can do my job.

Are there other similar options out there that you guys can recommend? Another extension I absolutely have to have is called "You're fired". It removes everything I don't like from my YT feed based on search terms. It's perfect because interacting with the unwanted stuff doesn't seem like a good idea (at least it doesn't remove it from my feed even if it's supposed to). I don't have to interact, just add a search term one single time and it'll be gone for good. That extension wasn't widely available for other browsers last I checked so I'd like to keep using Brave if possible.

He's Canadian and he'll always have the most ridiculous source (see the post title) or the worst, goalpost-moving response ("who said that?" "how?" "well the lady said there was no impact because they just didn't get their $50M payday but they still had all the medicine." "I don't think the number is zero, but it's not what people said it would be.")

I know the easiest answer is just ignore him like most people do. But it is so infuriating when there are hundreds of thousands of people actively dying.

I have to travel internationally soon, and I’ve been making a list of things I simply cannot get here (by which I mean Brazil): right now it’s benadryl and maple syrup. Last time peanut butter was on the list, but it’s since become a gym-bro food and is much more accessible. But the thought occurred to me others must have their own lists.

So what’s something you can only buy when in another country that you make sure to pick up?

Afternoon! I am needing a little help. I've been on the hunt for the correct Curved End Links for a SKX model watch for about a month now, with no luck. AliExpress/eBay have not been all that great in "fine print."

Long story short, I need to replace the end links on my SKX007 that's on a Jubilee bracelet.

Each time I order, the end links are either "too flat" or are not cut properly.

Where can I get some curved end links that are not bonkers expensive and/or a whole new bracelet?

Model: Seiko SKX
Bracelet: Jubilee
Lug: 22mm

Thanks!