4 ms·
> > "On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAut
by msbarnett 4y ago
> > "On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators..."
> Too vague to be useful. Stolen from whom?
Heroku and Travis CI. That information is literally in the end of the sentence you cut off:
"On April 15, we published a blog detailing an attack campaign utilizing stolen OAuth user tokens issued to two third-party GitHub.com integrators, Heroku and Travis CI."
- celticninja 4y agoIt could also be read as a total of 4 third party integrators. The comma between integrators and Heroku could indicate a part of a list. It's not as clearly written as it could be that is for sure.
- msbarnett 4y agoIt would really only make sense for someone to write it that way if Heroku and Travis CI were not "third-party OAuth integrators" (which they are). At some point we're just playing "Yes but if we assume the author did not speak English natively and made this particular kind of odd error, then you could read it as meaning...". Occam's Razor applies – the simplest possible reading is almost certainly the correct one.