4 ms·
> they relied on so much detailed information about the environment being attacked A disgruntled, previous employee may easily have access to such information,
by selcuka 4y ago
> they relied on so much detailed information about the environment being attacked
A disgruntled, previous employee may easily have access to such information, but nothing else because their credentials had been disabled.
- kelnos 4y agoI think you overestimate what kind of information most employees -- even those who build the software that runs on their servers -- have about their execution environments.
- iratewizard 4y agoSure, but at one point in time I had the names, addresses, social security numbers, DoBs and in-patient statuses of around 20k people. I didn't want it or like that it was there, but it was due to carelessness. Or the time I found a client database was actually a flat file with usernames, emails and passwords in plain text. Hertzbleed is out of a sci-fi movie. The stuff a lot of developers come across is not exploited sheerly out of professionalism.
- userbinator 4y agoIt also requires having access to continuously "challenge", for many hours, a server which seemingly has no other processing to do but running this one crypto algorithm in an otherwise noise-free environment.