3 ms·

Yeah that doesn’t make sense to me. Sales would do something like that. Legal should be erring in the opposite direction.

• jasonwatkinspdx 6y ago
  No. They don't care if customers get pwnd. They care if customers become aware of exactly how they got pwnd and launch a class action. It's shitty but entirely predictable behavior common in these situations.
  • airstrike 6y ago
    But rotating credentials would not hurt or help that alleged goal of hiding the truth from customers...
    • chrisbolt 6y ago
      “force rotation of all customer credentials” = make customers change their passwords, which is a huge red flag that would draw attention to why they were forcing that.
      • hn_throwaway_99 6y ago
        Github just recently logged out all users because they had a bug that could leak other account data into sessions. They were very transparent about why they did that, what happened, and I for one trust them more for it.
        • ric2b 6y ago
          But for GitHub it was mostly a preventative measure, while for Ubiquity, regardless of how transparent they were, it would look really bad. Of course it looks even worse now that we know they didn't do anything to help customers.
  • beervirus 6y ago
    Well you’re right that it’s not their job to represent customers. Their client is the company. But telling your client to sweep something like this under the rug isn’t exactly great advice.