3 ms·
> This sort of stuff happens to every hosted service you > use, 95% of the time you don’t hear about it because it > is a real hostile and the company just
by Estragon 15y ago
> This sort of stuff happens to every hosted service you
> use, 95% of the time you don’t hear about it because it
> is a real hostile and the company just pays some ransom
> demand in exchange for not being screwed.
Or you don't hear about it because the hostile is quietly making hay from the vulnerability in some other way. Like spying on private github repositories. The fact that github was hacked "by a friendly" doesn't mean it was only hacked by him.
- chimeracoder 15y agoI believe GitHub was able to tell which public keys had been added using this exploit (because with this vulnerability, the log files should still be intact). So we/they can safely say that this vulnerability was not exploited maliciously. Sure, there may be others we haven't heard of, but that's potentially true about any service.