[HN Gopher] CircleCI incident report for January 4, 2023 securit...
       ___________________________________________________________________
        
       CircleCI incident report for January 4, 2023 security incident
        
       Author : dserodio
       Score  : 19 points
       Date   : 2023-01-13 21:21 UTC (1 hours ago)
        
 (HTM) web link (circleci.com)
 (TXT) w3m dump (circleci.com)
        
       | [deleted]
        
       | jscheel wrote:
       | Buried in the middle of the post is this most-important tidbit:
       | 
       | > Though all the data exfiltrated was encrypted at rest, the
       | third party extracted encryption keys from a running process,
       | enabling them to potentially access the encrypted data.
        
         | mdeeks wrote:
         | Unfortunately this was already a given since there were reports
         | of users secrets (canary tokens) being used. They got the
         | secrets for sure. It just wasn't clear how many they got. It
         | doesn't matter though, you have to assume if you use CircleCI
         | then your secrets were stolen. If you haven't rotated them then
         | likely the only reason you haven't been compromised yet is out
         | of luck.
        
       ___________________________________________________________________
       (page generated 2023-01-13 23:02 UTC)