3 ms·
from the disclosure: > After examining the image from our July investigation, we discovered software capable of generating TOTP codes if provided a TOTP key. W
by novaleaf 11y ago
from the disclosure:
> After examining the image from our July investigation, we discovered software capable of generating TOTP codes if provided a TOTP key. We found software implementing the decryption method we use to secure TOTP keys, along with the secret key we use to encrypt them. We also found commands in the bash history that successfully generated a one-time code. Though the credentials found were unrelated to any of the unauthorized Linode Manager logins made in December, the discovery of this information significantly changed the seriousness of our investigation.
so, it was an inside job then?