News for hackers. Stuff that matters.

A comment on Whistleblower: Ubiquiti Breach “Catastrophic”. Parent comment

Re:Whistleblower: Ubiquiti Breach “Catastrophic” by rossipedia on Tuesday March 30, 2021 @04:55PM (#26640348)
> My guess is their local workstation was compromised

Honestly I don't think it was even that complicated, considering when I needed to spend money on some SaaS product the "chief accountant" (because there was no CFO) straight up sent me a photo of the corporate credit card and said "delete that when you're done".

[ Parent | on HN ]
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by nhumrich on Tuesday March 30, 2021 @11:01PM (#26643065)
Sure, but to be fair, credit cards really aren't that dangerous of a credential to wave around. You can cancel your card at anytime, and even dispute the charges. Its like instant key rotation, with a way to also roll back time.
[ Parent | on HN ]
Re:Whistleblower: Ubiquiti Breach “Catastrophic” by cutemonster on Wednesday March 31, 2021 @04:06AM (#26644641)
And they can have monthly spending limits too
[ Parent | on HN ]