Sourcegraph: Incident involving unauthorized admin access

Re:Sourcegraph: Incident involving unauthorized admin access by ttyyzz on Thursday August 31, 2023 @05:42AM (#37334647)

I don't know but it always seems to be worded like in this instance: "...A small subset of customers’ Sourcegraph license keys may have been accessed..."

I don't buy that, it always seems to me like an attempt to downplay something.

[ Parent | on HN ]

Re:Sourcegraph: Incident involving unauthorized admin access by dcomas on Thursday August 31, 2023 @10:53AM (#37338102)

I lead security at Sourcegraph and have been overseeing the incident investigation and resolution. To give you more specific details, I can say that we saw that the attacker viewed a page where they would have only seen the first 20 items, and we were able to determine what those were at the time of viewing because of stable sorting.

[ Parent | on HN ]

Re:Sourcegraph: Incident involving unauthorized admin access by stuzenz on Friday September 01, 2023 @03:58AM (#37347957)

Kudos. Thanks for the good communications and security response.

[ Parent | on HN ]

Re:Sourcegraph: Incident involving unauthorized admin access by 9dev on Saturday September 02, 2023 @02:35AM (#37359049)

That… didn’t age well

[ Parent | on HN ]

Re:Sourcegraph: Incident involving unauthorized admin access by jamietanna on Saturday September 02, 2023 @10:35AM (#37361887)

In what way? Has something else happened since?

[ Parent | on HN ]