3 ms·
Depending on how weak those credentials were, this sounds like something you should report to Krebs as well.
by throwawaymath 7y ago
Depending on how weak those credentials were, this sounds like something you should report to Krebs as well.
- jacquesm 7y agoI'll bet client4 is already breaking an NDA or two just by posting this.
- Scoundreller 7y agoAccording to the NDA, client4 doesn't even exist...
- ASalazarMX 7y agoSecurity by NDA, cheapest infosec.
- jeromegv 7y agoI mean the whole point of that company hiring someone to do a penetration test is to be sure this doesn't end up on Krebs. You pretty much lose your reputation if the company thinks you will go around and leak what you found out through that private investigation.
- throwawaymath 7y agoGood point, I jumped the gun a bit there. I misread the comment and thought they meant the firm didn't do anything about a pentest result, not that they found it themselves.
- deleted 7y ago[deleted]