Hacker News new | past | comments | ask | show | jobs | submit login

Twitter:

function adminPanelShow()

{

   if ( !isInOurVPN() ) 

      throw logSecurityBreach(); 

      

   if ( !isLoggedIn() ) 

      throw logSecurityBreach(); 

  
   slackSecurityChannel("AdminPanel Access: " + userName); 

   ... 

}



Is it possible the attacker was in the VPN and logged in?


Do you know how account takeovers work?


You work in security. Sad.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: