3 ms·
From the techcrunch article: > “On June 30th, a16z addressed a misconfiguration in a web app that is used for the specific use case of updating publicly availa
by Capricorn2481 2y ago
From the techcrunch article:
> “On June 30th, a16z addressed a misconfiguration in a web app that is used for the specific use case of updating publicly available information on our website such as company logos and social media profiles. The issue was resolved quickly and no sensitive data was compromised,”
What the fuck is this? They are blatantly lying here. There was a lot of sensitive data compromised. Anyone who inspected the site could have had access to everyones emails.
- lazzlazzlazz 2y agoHow do you know that? Both quotes seem to explain why what you're saying isn't true.
- Capricorn2481 2y agoIf anyone could view any of those secrets and access emails, then sensitive data was exposed. They can't just decide it wasn't exposed because no one else told them about this.
- lazzlazzlazz 2y agoCouldn't it be the case that the secrets were not useful for accessing sensitive emails? Their response made it sound like the secrets were limited to a specific, limit-used app.
- Capricorn2481 2y agoI'm just going off what the hacker said. > the compromised list of services: > their database (containing PII) > their AWS > their salesforce (never checked, account may be limited) > mailgun (arbitrary emails from a16z domains, and also could read older emails) > ... and probably more