Re:Ontario government staffer fired after $100 donation to O...
by seldom0 on Sunday February 20, 2022 @01:36PM
(#30408072)
I wonder what the RBAC permission history is for the bucket. If that's obtainable, the answer should be obvious.. if it was open from the beginning.
[ Parent
| on HN ]
Re:Ontario government staffer fired after $100 donation to O...
by inter_netuser on Sunday February 20, 2022 @02:01PM
(#30408291)
Payment data, including card data, was obtained as well. This would not be held by the crowdfunding platform, but by the payment processor only, that are subject to quite a few rules and annual audits.
Definitely a hack.
Besides, opening unlocked doors can still get you charged with break and entry, or in this case, unauthorized access.