Or, given the numerous vulnerabilities, perhaps a breach already has happened. These are exactly the kind of security flaws bad guys exploit in large-scale breaches.
That's exactly what I've been wondering. Hackers have certainly had enough time to get in there and look around. How much data has been taken, and where will it show up?
According to the post the white hats that found these and other holes testified in front of congress. I think it is safe to tell their parents at this point.
That says he didn't hack the site to access the data. In the video he says the information was collected using "passive reconnaissance" which means he could get the data without attacking it directly.
7 comments
[ 16.0 ms ] story [ 682 ms ] threadOr, given the numerous vulnerabilities, perhaps a breach already has happened. These are exactly the kind of security flaws bad guys exploit in large-scale breaches.
That's exactly what I've been wondering. Hackers have certainly had enough time to get in there and look around. How much data has been taken, and where will it show up?
Except not. This was misreported and spread like wildfire.
https://twitter.com/HackingDave/status/425640931690565632