4 ms·
> NordVPN said it found out about the breach a “few months ago,” but the spokesperson said the breach was not disclosed until today because the company wanted t
by hellcow 7y ago
> NordVPN said it found out about the breach a “few months ago,” but the spokesperson said the breach was not disclosed until today because the company wanted to be “100% sure that each component within our infrastructure is secure.”
Not acceptable.
- missosoup 7y agoYes it is? Giving realtime public status updates makes your attacker privvy to your actions and how much you know. Fix first, publicly announce when safe to do so. Same reason why SWAT etc. don't want media crews covering their actions in real time. It's broadcasting your view of the situation and intent to the opponent.
- stnmtn 7y agoWhat should they have done if they knew about a potential infrastructure weakpoint? How should they announce that to the public before fixing it?