Comment on NordVPN denies breach claims, says attackers have "dummy data"

Lembot_0006@programming.dev ⁨3⁩ ⁨days⁩ ago

• dublet@lemmy.world ⁨3⁩ ⁨days⁩ ago

  They operate a business that charges for a service, and therefore have user accounts and payment data for those accounts.

  source

  • john_lemmy@lemmy.ml ⁨3⁩ ⁨days⁩ ago

    There is at least one VPN provider (that I know of) that doesn’t record account and payment data. You can send the fee via regular post in a envelope tied to only a random numerical user ID

    source

    • Postmortal_Pop@lemmy.world ⁨3⁩ ⁨days⁩ ago

      Mulvad. That’s how I do it.

      source
• prole@lemmy.blahaj.zone ⁨3⁩ ⁨days⁩ ago

  It wasn’t, it was test data

  source

  • Lembot_0006@programming.dev ⁨3⁩ ⁨days⁩ ago

    You don’t have any “test data” if you don’t have any “real data”. Why would you?

    source
• null@piefed.nullspace.lol ⁨3⁩ ⁨days⁩ ago

  Same reason as any other online company?

  source

  • Lembot_0006@programming.dev ⁨3⁩ ⁨days⁩ ago

    So for selling it to aggregators? That’s bad practice for a VPN-providing company.

    source

    • null@piefed.nullspace.lol ⁨3⁩ ⁨days⁩ ago

      So for selling it to aggregators?

      You really think thats the primary function for user data? Not like, billing?

      source

      • Lembot_0006@programming.dev ⁨3⁩ ⁨days⁩ ago

        Billing? ID -> balance. “Very” important data for hackers. They had more? Like card numbers, names, addresses, etc? That’s a bad practice for VPN providers.

        source

        • -> View More Comments
• a_non_monotonic_function@lemmy.world ⁨3⁩ ⁨days⁩ ago

  Because your previous trust is clearly misplaced.

  I don’t care what somebody’s TOS says, I’m going to remain skeptical.

  source