4 ms·
How do you know if any employee passwords were stolen? How do you know it wasn't just a basic application exploit? How do you know Weebly doesn't do the things
by scurvy 10y ago
How do you know if any employee passwords were stolen? How do you know it wasn't just a basic application exploit?
How do you know Weebly doesn't do the things you mentioned?
Fact is, you don't and that post was just an ad for your "services" in the form of a thinly veiled critique.
- lrvick 10y agoI have no idea if that was what caused this particular incident, but there was a lot of exposed surface on the table in that area making an attackers job that much easier via those vectors. Employee workstation or credential compromise is one of the most common ways internal assets are stolen. When easy to implement measures are not taken like using hardware tokens to gate access... then I am left to suspect if any of the harder things were done. As for making an ad for my "services". My company does not provide security services and I am not looking for a job in this space. Pretty happy where I am. I gain nothing from posting this but to promote discussion I feel is important for our industry. I do however participate in a not-for-profit community I have funded mostly out of pocket for the last 15 years for helping teach better system admin and security practices. If you can even find it, and want to call this an ad for that ... uh, sure.