Post #3134778
2024-01-18 12:58 UTC
@WPalant@infosec.exchange in this case it just sounds like he used the key to open the front door, saw an absolute mess & notified the company of the issue
Replies (1)
-
@RakowskiBartosz@hachyderm.io 2024-01-18 13:47
@thisismissem@hachyderm.io @WPalant@infosec.exchange this seems to omit the other side of the story. If I understand this correctly, vendor software was making undocumented calls to outside infrastructure and sharing potentially sensitive data. It should be in company's right to check the level of exposure to properly protect their and their customers' rights.