3 ms·
> Okta service has not been breached and remains fully operational > highlighted that there was a five-day window of time between January 16-21, 2022, where an
by tofuahdude 5y ago
> Okta service has not been breached and remains fully operational
> highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop
These are some impressive mental gymnastics!
- RL_Quine 5y agoYeah, this blog post is shoveling it. They were popped, they aren't internally consistent in their dismissal of it.
- benatkin 5y agoWhat got me was this: > Okta detected an unsuccessful attempt to compromise the account of a customer support engineer working for a third-party provider > highlighted that there was a five-day window of time between January 16-21, 2022, where an attacker had access to a support engineer’s laptop
- c7DJTLrn 5y agoYou didn't see graphite. Identity providers cannot be compromised!
- chippiewill 5y agoOnly a support engineer was compromised. Not great, not terrible.
- Ozzie_osman 5y agoNot saying this is what happened or defending Okta, but these two statements could be true. Assuming the support engineer had ACCESS to allow him to do some bad stuff, but they have audit logs to prove his account didn't use that access (except to take screenshot), both statements could be true. It's unlikely but possible.
- deleted 5y ago[deleted]