4 ms·

> We also believe the attackers removed from our systems certain information relating to 2.9 million Adobe customers, including customer names, encrypted credit

by Osmium 13y ago

> We also believe the attackers removed from our systems certain information relating to 2.9 million Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders. At this time, we do not believe the attackers removed decrypted credit or debit card numbers from our systems. Well that's reassuring(!) If these hackers were so "sophisticated" then presumably they could have obtained Adobe's decryption keys too? If not, why not? Guess I'll have to phone my bank tomorrow... hope they don't charge me for the new card. Oh Adobe... Edit: It just occurs to me that people with pirated Adobe software aren't having any problems right now. The same argument could be made of any service, of course, but at least with the old way of purchasing Adobe software (vs. Creative Cloud) Adobe didn't have to store your credit card number for an extended period of time. I don't think this excuses piracy, but it's not going to do anything to discourage it.

zmmmmm 13y ago
> At this time, we do not believe the attackers removed decrypted credit or debit card numbers from our systems That sentence is disinformation. It carefully leaves unanswered the question of whether the encryption keys were stored in a location accessible to the attackers. The only reason to use that kind of language is to try and confuse everybody into believing things are not as bad as they would otherwise look.
- x0054 13y ago
  > At this time, we do not believe the attackers removed decrypted credit or debit card numbers from our systems That sentence also suggests that Adobe DOSE store decrypted credit or debit card numbers, but the hackers did not get to that database... yet.
davvid 13y ago
We also believe the attackers removed from our systems certain information relating to 2.9 million Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders On first reading I had a split-second where I thought the attackers did everyone a favor by deleting the data; e.g. "drop table customer_financial_data". Unfortunately they meant the ~other~ kind of "removal". I think "obtained" would have been a better word to use here (instead of "removed").
- wglb 13y ago
  Exfiltrated.
- Udo 13y ago
  It's like this Hollywood trope where data can only ever be moved - not copied. Come to think of it, that's essentially what the MPAA believes, too.
jrockway 13y ago
Too bad the hackers were looking for credit card information and not their DRM master keys.
ddalex 13y ago
Fucked if they do, fucked if they don't. If it wasn't encrypted, why were they so stupid ? If it's encrypted, fuck them too. This shit happens. To EVERYBODY, sooner or later. What makes a difference is how to handle it. I say Kudos to Adobe for storing encrypted data, being open and owning it up, and trying to fix what's been messed.

by Osmium 13y ago

zmmmmm 13y ago

> At this time, we do not believe the attackers removed decrypted credit or debit card numbers from our systems That sentence is disinformation. It carefully leaves unanswered the question of whether the encryption keys were stored in a location accessible to the attackers. The only reason to use that kind of language is to try and confuse everybody into believing things are not as bad as they would otherwise look.

x0054 13y ago
> At this time, we do not believe the attackers removed decrypted credit or debit card numbers from our systems That sentence also suggests that Adobe DOSE store decrypted credit or debit card numbers, but the hackers did not get to that database... yet.

davvid 13y ago

We also believe the attackers removed from our systems certain information relating to 2.9 million Adobe customers, including customer names, encrypted credit or debit card numbers, expiration dates, and other information relating to customer orders On first reading I had a split-second where I thought the attackers did everyone a favor by deleting the data; e.g. "drop table customer_financial_data". Unfortunately they meant the ~other~ kind of "removal". I think "obtained" would have been a better word to use here (instead of "removed").

wglb 13y ago
Exfiltrated.
Udo 13y ago
It's like this Hollywood trope where data can only ever be moved - not copied. Come to think of it, that's essentially what the MPAA believes, too.

jrockway 13y ago

Too bad the hackers were looking for credit card information and not their DRM master keys.

ddalex 13y ago

Fucked if they do, fucked if they don't. If it wasn't encrypted, why were they so stupid ? If it's encrypted, fuck them too. This shit happens. To EVERYBODY, sooner or later. What makes a difference is how to handle it. I say Kudos to Adobe for storing encrypted data, being open and owning it up, and trying to fix what's been messed.