3 ms·
Am I right to say GitHub knew about this on the 12 April [1], but Heroku customers are only finding out now, 4 days (!!!!) later? Heroku boasts: > we will not
by nomilk 5y ago
Am I right to say GitHub knew about this on the 12 April [1], but Heroku customers are only finding out now, 4 days (!!!!) later?
Heroku boasts:
> we will notify affected customers by email without undue delay.
4 days. Really. "without undue delay".
[1] https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/ https://github.blog/2022-04-15-security-alert-stolen-oauth-u...
- sofixa 5y ago> Following immediate investigation, we disclosed our findings to Heroku and Travis-CI on April 13 and 14 13-14, so "only" 1-3 days later, depending on what GitHub mean and timezones involved.