3 ms·
> he also exfiltrated their customers' data and processed that? AFAIK he did not mention if he created the hashes using the DB or locally. I suspect that he us
by nikeee 3y ago
> he also exfiltrated their customers' data and processed that?
AFAIK he did not mention if he created the hashes using the DB or locally. I suspect that he used a built-in function of MySQL to hash the data on the server.
- hnbad 3y agoOkay, then he only exfiltrated the hashes. Hashing on the server still constitutes processing though.
- nikeee 3y agoWell yes, but it was done with the intention to provide the ability to the end users to check if they are affected. The original vendor may not be trusted in providing accurate information about that. At least there is some reason to believe that.