3 ms·
Because breaches come from public vulnerabilities, unless you can prove there was no breach, you should treat it as a breach. This is common information securit
by dangerface 8y ago
Because breaches come from public vulnerabilities, unless you can prove there was no breach, you should treat it as a breach. This is common information security practice.
Google are unable to prove there was no breach because they didn't keep sufficient logs, which is also not acceptable in modern security practice.
- staticassertion 8y ago> This is common information security practice. No it isn't. If every vulnerability in every product turned into a "We've been breached" disclosure the industry would be a disaster. Yeah, they didn't keep sufficient logs and they fucked up really badly there. Still silly to call it a breach.
- dangerface 8y agoThe industry is a disaster because companies don't disclose potential breaches.