Hacker News new | past | comments | ask | show | jobs | submit login

What's the point of reporting? We had an issue with a sysadmin. Ended up firing him but didn't revoke all his credentials in time. He logged in and deleted all our Azure servers and rm -rf'd our GCP boxes. MS wouldn't help us at all, but Google's console log showed the login from the guy's town. What're we supposed to do? He was in England and we the US.

Had a similar issue with a hacker that found a way around our billing systems. Ran up $90k of charges. He was in Montreal and we even had his ID. What're we gonna do, waste time trying to go after someone that'll claim it was our bug and he didn't know anything was wrong?




The US has police relations with both the UK and Canada. When happened when your company tried to contact authorities in those States? It seems like prosecution should be possible, or at least civil liability.


Important lesson: when dealing with a problem sysadmin, revoke their credentials before telling them they're fired.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: