News for hackers. Stuff that matters.

A comment on Okta’s Investigation of the January 2022 Compromise. Parent comment

Re:Okta’s Investigation of the January 2022 Compromise by caffeine on Wednesday March 23, 2022 @03:56AM (#30776100)
Nope. You are just not understanding it.

To simplify: The hackers had minimal access to stuff and couldn’t do much.

[ Parent | on HN ]
Re:Okta’s Investigation of the January 2022 Compromise by _sword on Wednesday March 23, 2022 @05:59AM (#30776810)
They could see the names and contacts of employees at Okta’s customers and reset their credentials at a bare minimum per the leaked screenshot. That doesn’t seem that minimal?
[ Parent | on HN ]
Re:Okta’s Investigation of the January 2022 Compromise by JshWright on Wednesday March 23, 2022 @06:51AM (#30777092)
Based on the screenshots, they could trigger password reset emails. They couldn't directly set the new password.

Not defending Okta's response here; I think it has been quite terrible.

[ Parent | on HN ]