Post #2867986

@PogoWasRight@infosec.exchange @zackwhittaker@mastodon.social @euroinfosec@infosec.exchange @campuscodi@mastodon.social @JayeLTee@infosec.exchange holy fucking shit, that is a level of incompetence and ignorance i have literally never envisioned would be possible - legal data, HIGHLY confidential - public share on a PUBLIC IP (not even behind a VPN, or another mechanism) - weak protection - evasive behaviour when finding out about these shares - ignorance, blockading, direct dismissal, and INSTRUCTING OTHER PARTIES TO DISMISS CONCERNS - not listening when clients request their data to be deleted(!) this company is just ASKING to get a fucking legal case filed against THEM, jesus fucking christ im just thinking that that company lost or fired their sysadmin/programmers, and now are just flying based on what they have, and just "let the problem go away" when someone complains, and that being good enough for not-tech-savvy users jesus fucking christ