Re:Security Researcher exposes abysmal cybersecurity of Slic...
by Hates_ on Friday February 21, 2020 @04:10PM
(#22386769)
I _just_ received the following email:
if you're reading this it's too late. we have your data.
here's where you live:
*****
how do we have this data? we read this:
https://link.medium.com/esfwWoQ4f4
so what are we doing with your data? not much (that's good!)
we're just using 377428 emails from their customer database to send this mass email (that's bad!)
because right now, ANYBODY can do what we just did, and they might do something really shitty with the same data we took
we don't want that. the guy who wrote the medium artcle didn't either. he warned slickwraps and they didn't do shit
Re:Security Researcher exposes abysmal cybersecurity of Slic...
by metalliqaz on Friday February 21, 2020 @12:36PM
(#22384965)
Seems a little self righteous, but otherwise an interesting read. Not surprised at all about Slickwraps, their business is all about lowest-cost everything.
Re:Security Researcher exposes abysmal cybersecurity of Slic...
by black_puppydog on Saturday February 22, 2020 @04:16AM
(#22390119)
So... Just pointing out... Under the GDPR, this would be a prime candidate for those fines of up to four percent of global turnover. But honestly, ignoring the big banner at the top of a code example "Don't use this, shit might go wrong!" and then the warning from an outsider "Stop using this, shit did go wrong!" sounds like negligence to me anyhow...
Side note: I find the way medium are handling this horrible.
1. There's no indication what they're investigating there. Just that it's being investigated.
2. There's no indication as to the status of their decision process. From what's written on the page, they might still be working on it, or it might be ancient history to them.
Would like to see the link changed to the archived version.
Side note: I find the way medium are handling this horrible.
1. There's no indication what they're investigating there. Just that it's being investigated.
2. There's no indication as to the status of their decision process. From what's written on the page, they might still be working on it, or it might be ancient history to them.
Would like to see the link changed to the archived version.