3 ms·
Wait, but doesn't this jeopardize the people who sold the VPNs to them? I mean, it should be pretty straightforward for T-Mobile to know which specific account
by skilled 5y ago
Wait, but doesn't this jeopardize the people who sold the VPNs to them? I mean, it should be pretty straightforward for T-Mobile to know which specific account was used to access unauthorized data? Maybe I am misinterpreting it.[0]
[0]: I am assuming that each VPN has a unique identifier.
- buddylw 5y agoIt’s possible, but I doubt they willingly sold their credentials. It’s more likely that they were scraped by some other means and sold.
- caymanjim 5y agoYou'd be surprised how little is recorded for most transactions. While it's possible to retain a full audit trail for data access, most systems don't. Answering questions like "who looked at this database" is impossible in just about every system I've ever worked with. Some of the more sensitive financial or personal data systems might retain records of who changed a value, but even that is rare and in most cases easily faked or hidden.
- martinmunk 5y agoIn healthcare in my part of Europe, it is a requirement to log every access to patient journals. And if a nurse, doctor or similar access a journal they most likely have no reason to, it can get flagged for investigation.