4 ms·
Are you suggesting they should have been doing this as a matter of course, or once they were notified of the breach and the data available on GitHub?
by jsmeaton 7y ago
Are you suggesting they should have been doing this as a matter of course, or once they were notified of the breach and the data available on GitHub?
- JoshTriplett 7y agoWouldn't be a bad idea to throw a few dummy records into the database with unique names and other information, and constantly search for them.
- jsmeaton 7y agoSearch for them where? Github? Pastebin? Numerous other known and unknown websites? In what format? Do ToS for each of the sites being scraped support this? Do you stick dummy records in every single data set? That's why I'm asking if the GP was talking about proactively searching or searching once they were aware.
- pmart123 7y agoWell, my main point is I think it is somewhat absurd to blame GitHub for this. Sure, they can scan for SSN numbers, etc. but how many hackers are going to post stolen information to their Github account? A second matter though is there might be a business model around a service that scans for sensitive information or proprietary code on Github, Bitbucket, etc. My guess is though it is much easier to detect a breach upon data exfiltration versus scanning the web.
- eitland 7y agoOr, if you use UUIDs: just do a web search for some real ones and scrape for real ones on places you are aware of that aren't indexed. (Don't know how common it is for leaks to be scrubbed before uploading.)
- zenexer 7y agoUseless information like UUIDs is normally removed prior to a leak going public. Public dumps rarely resemble the form of the original data.