News for hackers. Stuff that matters.

A comment on CircleCI says hackers stole encryption keys and customers’ source code. Parent comment

Re:CircleCI says hackers stole encryption keys and customers... by lemon_bottle on Sunday January 15, 2023 @12:46AM (#34387052)
Unpopular opinion but I think whenever these 'hack' incidents happen, there should be a full disclosure and the company should be made to tell us what exactly was hacked right down to the nuts and blots, sql queries and server processes level.

There should be full transparency on this and all the open source eyeballs should be able to study and scrutinize this. If not, anyone will be able to get away with data theft tomorrow saying, "my server got hacked". What will cause them to not do it except some sense of personal ethics which is rapidly degrading these days?

[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by stingraycharles on Sunday January 15, 2023 @01:24AM (#34387200)
That is not an unpopular opinion, people have been arguing on this forum for proper legislation around these types of security incidents and breaches for years.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by foepys on Sunday January 15, 2023 @03:45AM (#34387881)
GDPR requires a full disclosure of which data and users are affected and when it happened, which I think is fair for the average user.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by AYBABTME on Sunday January 15, 2023 @04:30AM (#34388077)
But that's like a bridge collapsing and only having to produce a list of who got injured and what their injuries were.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by true_religion on Sunday January 15, 2023 @07:04AM (#34388793)
Bridges tend to be owned by the government which in democratic counties gives an accounting to the public.

Private bridges, have owners who give an accounting to no one when they collapse. At best, if you have standing you can sue them and they will defend themselves by giving an accounting for why it’s not their fault or they did their best.

[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by pedro2 on Sunday January 15, 2023 @05:13AM (#34388283)
Those things need to be supervisioned. FlyTAP has gotten their entire rewards DB (if not all their DB) hacked and if it were not for IHBP I would never know because the company never told me. As far as I know FlyTAP never got a fine for ignoring its obligations.

GDPR is a good idea but there must be supervision for it being applied as defined.

[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by BaculumMeumEst on Sunday January 15, 2023 @07:08AM (#34388806)
That opinion seems like common sense. Why do you think it would be unpopular?
[ Parent | on HN ]