3 ms·
Is there any signs that this data is actually out in the wild? From the article, it was found, reporter and fixed within 24 hours, and they claim there's no sig
by ehsankia 7y ago
Is there any signs that this data is actually out in the wild? From the article, it was found, reporter and fixed within 24 hours, and they claim there's no sign of other unauthorized access.
- reaperducer 7y agoIs there any signs that this data is actually out in the wild? Check the dark web. From the article, it was found, reporter and fixed within 24 hours Being fixed within 24 hours of being reported does not mean it was only available for 24 hours. It could have been 24 days or 24 months. they claim there's no sign of other unauthorized access. Anyone smart enough to access this would also be smart enough to cover their tracks. When I was black hat in the 80's, this was Infiltration 101.
- xixixao 7y agoCovering up is not always technically possible. It’s easy to expose data through some unprotected end point, but that end point might still be logged, and turning off the logging/deleting the logs might be a completely different challenge.
- thisisnico 7y agoEven more challenging if the log destination is external, and if the logging system is an entirely independent system, even potentially provided by a third party. Makes this hard to do.
- ehsankia 7y agoI know full well it could've been accessed, I never rejected such a possibility. I'm just saying that so far, there is no sign that the data has been dumped anywhere. It could exist, but right now we can't "grep through it" because there isn't a dump of it in the wild yet.