4 ms·
My thoughts: I appreciate that they are very open about exactly what information was public and how this happened. Compared to many disclosures this is refresh
by cillian64 5y ago
My thoughts: I appreciate that they are very open about exactly what information was public and how this happened. Compared to many disclosures this is refreshingly straightforward. However, it looks like that they are only telling me about this 4-5 months after it was discovered internally, which is disappointing.
- mshockwave 5y agokudos to github on this specific case, too. It's possible that they did take 4-5 months to figure out the whole picture, either due to complexity of the indcient or simply the bureaucracy (needs to be reviewed by PR or even lawyer etc.)
- jedberg 5y ago> it looks like that they are only telling me about this 4-5 months after it was discovered internally My guess is that it took them that long to figure out exactly what happened and then work with the vendor to scrub the data and verify it was scrubbed. They probably also asked the vendor to analyze their logs. So I'd give them the benefit of the doubt and say this was probably the quickest they could go.