News for hackers. Stuff that matters.

A comment on Sega Europe suffers major security breach. Parent comment

Re:Sega Europe suffers major security breach by whoknew1122 on Thursday December 30, 2021 @02:02PM (#29740081)
How would Sega know there are AWS API keys in a public S3 bucket without vpnoverview defacing their careers site? Sega could probably, y'know, look in the S3 bucket at the identified file which contained the keys.

All of the things found could have been investigated by Sega and replicated if vpnoverview just documented how they got access to the info.

You don't have to joyride in a car to show the owner that they dropped their keys.

[ Parent | on HN ]
Re:Sega Europe suffers major security breach by craftinator on Thursday December 30, 2021 @02:27PM (#29740408)
> You don't have to joyride in a car to show the owner that they dropped their keys.

This is the most accurate analogy I've seen in months, thank you for sharing it!

[ Parent | on HN ]
Re:Sega Europe suffers major security breach by wwtrv on Thursday December 30, 2021 @04:22PM (#29741595)
In this case SEGA, due to their incompetence lost a bunch of car keys owned by other people despite claiming that they’ll keep them safe (and having a legal obligation to do so under GDPR). So I don’t see any problem with publicly exposing them.
[ Parent | on HN ]