Hacker News Reader

Comment by panarky | Hacker News Reader

Krebs claims "there is evidence to suggest we may hear similar disclosures from other companies soon".

https://twitter.com/briankrebs/status/1156204409203908609

From the article, there are a few other company names listed in the screenshot (caveat: these are just based on filenames, it's not 100% clear that these are the exact companies, they just seem to match):

42lines.net, apperian.com, globalgarner.com, astem.net, ford, identiphy (not clear which), codecademy.com, safesocial.media, starofservice.us, unicreditgroup.eu

There are other files in the dump, but it's not clear which companies they are.

Well hopefully this turns into a helpful public service in the end since she didn't try to sell them or use them for fraud. So most will probably just get fixed, again I hope.

But she was basically asking to go to jail and this could have easily gotten her some good money if she reported it responsibly. Either as an infosec worker or through vuln rewards programs.

Hopefully she has foiled a malware attack or two in her past. Otherwise it’s not looking good for her future.

She doesn’t sound like the most... neurotypical, and US courts really hate that.

infoblox is a company that does DNS, DHCP, and IPAM management. I think the big concern there is that it is at least named to look like it is their CTO's files, so who knows what is in there.

Reply on news.ycombinator.com