105
NordVPN denies breach claims, says attackers have "dummy data" (www.bleepingcomputer.com)
submitted 10 months ago by to c/technology@lemmy.world
27 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 24 points 10 months ago (24 children)

Why would *VPN even have ANY data worth taking through breaching?

  • permalink
  • fedilink
  • source
  • hideshow 24 child comments
    •
  • [–] 30 points 10 months ago (2 children)

    They operate a business that charges for a service, and therefore have user accounts and payment data for those accounts.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 10 months ago (10 children)

    Same reason as any other online company?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 1 point 10 months ago (9 children)

    So for selling it to aggregators? That's bad practice for a VPN-providing company.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 7 points 10 months ago (8 children)

    So for selling it to aggregators?

    You really think thats the primary function for user data? Not like, billing?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [+] -7 points 10 months ago (7 children)

    Billing? ID -> balance. "Very" important data for hackers. They had more? Like card numbers, names, addresses, etc? That's a bad practice for VPN providers.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 4 points 10 months ago (2 children)

    You are surprised that a for-profit company that bills people on a RECURRING basis for a paid service keeps card numbers and billing addresses/names? How would recurring bills be paid if the info isn't stored?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -4 points 10 months ago (1 child)

    You are surprised

    I'm not surprised. I am accustomed to the shit around.

    How would recurring bills be paid if the info isn’t stored?

    Just go to the bank (or open your bank application on the phone) and pay.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 10 months ago*

    This is not how most people operate around subscription services. People expect that the online subscription service will manage that shit. Less secure I know, but you live either in the past or in a much higher risk environment than most.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 10 months ago* (3 children)

    How do they send you your invoice? Password resets?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 10 months ago

    Mulvad gives you a 16 digit random number when you sign up. Anyone with that number can use that account, it's on you to not lose it, if you do you have to make a new account. You send them money and an account number and they add balance to that account. When it's out, that account is blocked from service until they get more money. You hack their service and you get a list of numbers and whether or not they have service. They keep no documentation and if you pay with card you have to manually input every time. I know them better than they know their users.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 10 months ago (8 children)

    It wasn't, it was test data

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] -3 points 10 months ago (7 children)

    You don't have any "test data" if you don't have any "real data". Why would you?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 7 points 10 months ago* (6 children)

    Uh.. this entire event is a strong reason for using dummy data in a testing environment. You shouldn't ever use production data in a test environment.

    You generate dummy data that looks like real data for testing purposes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] -3 points 10 months ago (5 children)

    You didn't understand what I am saying.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 10 months ago (3 children)

    I do understand, you just don't seem to understand that this testing environment never contained real data. And you can absolutely generate dummy data without having real data to start with.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] -4 points 10 months ago (2 children)

    I do understand,

    No, you don't.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •