News for hackers. Stuff that matters.

A comment on Matrix.org Security Incident.

Re:Matrix.org Security Incident by irgeek on Friday April 12, 2019 @04:04AM (#19642949)
Assuming the GitHub issues are from the actual attacker -- and I see no reason to doubt they are -- this is very troubling:

https://github.com/matrix-org/matrix.org/issues/363

Compromise began well over a month ago

Yikes. That's a long time for a compromise to go unnoticed.

[ Parent | on HN ]
Re:Matrix.org Security Incident by ygjb on Friday April 12, 2019 @11:07AM (#19645429)
Not really, the average in the industry seems to be floating between 70 and 400 days depending on the source of your stats on the topic (different vendors and reports use different stats for this)
[ Parent | on HN ]