4 ms·
Yeah and they failed to report to China's MIIT within the time window... https://www.wsj.com/articles/china-halts-alibaba-cybersecurity-cooperation-for-slow-rep
by fancl20 3y ago
Yeah and they failed to report to China's MIIT within the time window...
https://www.wsj.com/articles/china-halts-alibaba-cybersecurity-cooperation-for-slow-reporting-of-threat-state-media-says-11640184511 https://www.wsj.com/articles/china-halts-alibaba-cybersecuri...
(To be clear the obligation is not they have to report to Chinese government first. They just totally forgot to tell the government agency for coordinating these kind of security incident cross companies)
- rfoo 3y agoTBF at least half of the firms did't give a fuck to the specific regulation at that time, and given the rumor that the bug is found when a Security Engineer (who works on product security instead of vulnerability research) decided to learn CodeQL I'm not surprised nobody on his report chain cared enough. ... and oh hi are you the same fancl20 on <that mostly-defunct Chinese Twitter-clone> some 15 years ago?
- fancl20 3y agoYes I’m… hmmm you can contact me by my id at gmail if you want :)