News for hackers. Stuff that matters.

A comment on Sendgrid under siege from hacked accounts. Parent comment

Re:Sendgrid under siege from hacked accounts by 3np on Saturday August 29, 2020 @09:07PM (#24320542)
I really don’t understand this - I’ve read the parent comment 3 times and can’t see how you you come to the “gave someone the key to someone else” analogy.

Are we interpreting OP differently? From all I can read of available information, they seem to have been reasonable. Sounds more like their neighbor or the previous tenant had a meth lab.

[ Parent | on HN ]
Re:Sendgrid under siege from hacked accounts by qes on Saturday August 29, 2020 @10:07PM (#24320780)
> At work we had a Sendgrid account that got compromised

Parent commenter's account was compromised.

Are you assuming its SendGrid's fault the account was compromised? I'd assume the opposite.

[ Parent | on HN ]
Re:Sendgrid under siege from hacked accounts by 3np on Saturday August 29, 2020 @10:35PM (#24320910)
Especially given that they haven't had working 2FA for the longest time, it's not fair to say that OP allowed it or gave someone the keys.

Stretching the analogy, it's more like OP had the room keys lying on a table at a cafe, someone managed to copy the key after sniping a photo and then abused the room while OP was out for the night, and then OP notified the hotel staff once they got back and realized what was going on.

In both cases, OP was unaware of anyone having unauthorized access and it wouldn't have happened (as easily( if the business had better security.

[ Parent | on HN ]