News for hackers. Stuff that matters.

A comment on Okta says its GitHub account hacked, source code stolen.

Re:Okta says its GitHub account hacked, source code stolen by luc_ on Wednesday December 21, 2022 @05:20AM (#34078826)
IMO, it's a bit weird they would even host their source code on open-facing GitHub. Of course I don't know the whole story, but seems like a company dealing with security would benefit from hosting their on VCS, perhaps GitHub enterprise, behind a VPN..?
[ Parent | on HN ]
Re:Okta says its GitHub account hacked, source code stolen by mdaniel on Wednesday December 21, 2022 @01:10PM (#34084211)
That's one of those weird questions: does Okta have more resources for knowing abnormal VCS behavior, or GitHub?

IMHO the network is no longer the correct security boundary, and I hope I never encounter a VPN in my career ever again

[ Parent | on HN ]
Re:Okta says its GitHub account hacked, source code stolen by madcadmium on Wednesday December 21, 2022 @07:05PM (#34088053)
That would be contrary to Okta's zero-trust security model.
[ Parent | on HN ]