News for hackers. Stuff that matters.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by ajmurmann on Tuesday August 22, 2023 @01:35PM (#37226036)
TransUnion also has full control over what authentication mechanism they use. On the extreme end, they could require a Yubikey to be used. However, they deem the hassle to implement better auth not to be worth it while it's users who carry the cost of TransUnion's inability to properly authenticate people.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by mrguyorama on Tuesday August 22, 2023 @01:52PM (#37226293)
They also see zero reason to spend even a dime on better security of processes when they saw that the entire company could be pwned and distributed on the dark web and you end up losing zero revenue, maybe a million bucks in a class action suit.
Re:The Secret Weapon Hackers Can Use to Dox Nearly Anyone in... by NoZebra120vClip on Tuesday August 22, 2023 @02:06PM (#37226488)
Are they vulnerable to SSPR Abuse? I'm having great fun reporting to Very Large Services and being rebuffed because they don't understand or care.