3 ms·
Your IP is still in the access logs. The advice is good and we do this sometimes when not wanting to spend work time to deal with corporate politics around the
by Aachen 5y ago
Your IP is still in the access logs. The advice is good and we do this sometimes when not wanting to spend work time to deal with corporate politics around the reporting (though frankly the back-and-forth with the CERT is often a game of its own), but it wouldn't have helped in this case.
- pabs3 5y agoThis is why it is a good idea to use Tor or a VPN for most things or even just for when you casually go reverse engineering a competitor's product :)
- Aachen 5y agoAs I wrote in a comment elsewhere in the thread, I'm not sure if that is really the best idea. > Using anonymisation proxies just makes it all the more suspicious, by using a normal connection and disclosing any findings it's quite clear you're using your real name, have no malintent, nobody needs to try and dig for your identity... But yeah it all depends on the circumstances. Given how these companies are handling it, it couldn't have gone much worse I suppose. On the other hand, if the company suspects it was a black hat then you have to be very sure you can hide all tracks completely and, if found out, you have a lot more to explain.