3 ms·

Surely it was the company who performed the pentest. It's the best publicity they can get.

gchadwick 10y ago
'Look at how great we are at finding security vulnerabilities. Almost matched by our utter lack of discretion and confidentiality!' Hardly a good advert. I would have thought a pen testing firm would make client confidentiality an extremely high priority. My guess is a Palantir employee who feels that due to the volume and nature of the data they handle that it needs to publicly known their security isn't up to scratch.
- joshdickson 10y ago
  Well, I mean the whole point of confidentially leaking is to get something out there without having to put your name on it. This is a great advert for them no matter who leaked it, make no mistake about that.
andkenneth 10y ago
These guys get better PR by their reputation. They know what clients they want, so they can target them directly. Buzzfeed giving them positive PR is almost negligible in its impact. Meanwhile, if it came out that they leaked a pen test report, it would literally destroy their company. All their current clients would ditch them, they'd get sued into oblivion, and no one would trust the senior people there in the industry ever again. Would be a very dumb suicidal publicity stunt.
jacquesm 10y ago
> Surely it was the company who performed the pentest. Not a chance. Maybe an employee of that company did it who doesn't like Palantir but the company doing the pentests doing this on purpose is not on the table. The upside does not begin to counter the downside (such as not having a company any more). But you can bet they're digging very fanatically right now to figure out where the leak is.
wglb 10y ago
I would imagine that if even one such incident were to occur this way, it would severely limit future business opportunities.
SixSigma 10y ago
Or someone penetrated the pentesters
SixSigma 10y ago
Or someone penetrated the pentesters

'Look at how great we are at finding security vulnerabilities. Almost matched by our utter lack of discretion and confidentiality!' Hardly a good advert. I would have thought a pen testing firm would make client confidentiality an extremely high priority. My guess is a Palantir employee who feels that due to the volume and nature of the data they handle that it needs to publicly known their security isn't up to scratch.

joshdickson 10y ago
Well, I mean the whole point of confidentially leaking is to get something out there without having to put your name on it. This is a great advert for them no matter who leaked it, make no mistake about that.

andkenneth 10y ago

These guys get better PR by their reputation. They know what clients they want, so they can target them directly. Buzzfeed giving them positive PR is almost negligible in its impact. Meanwhile, if it came out that they leaked a pen test report, it would literally destroy their company. All their current clients would ditch them, they'd get sued into oblivion, and no one would trust the senior people there in the industry ever again. Would be a very dumb suicidal publicity stunt.

jacquesm 10y ago

> Surely it was the company who performed the pentest. Not a chance. Maybe an employee of that company did it who doesn't like Palantir but the company doing the pentests doing this on purpose is not on the table. The upside does not begin to counter the downside (such as not having a company any more). But you can bet they're digging very fanatically right now to figure out where the leak is.

wglb 10y ago

I would imagine that if even one such incident were to occur this way, it would severely limit future business opportunities.

SixSigma 10y ago

Or someone penetrated the pentesters

SixSigma 10y ago

Or someone penetrated the pentesters