Comments by "" (@sirtra) on "Thoughty2" channel.

  1. It's a little disappointing you stand by NordVPN - debating the difference between a breach and a hack doesn't justify why they kept quiet about the incident until they were forced by proof to come clean about it - nor does it excuse the lack of best practices that should have allowed them to detect the breach far sooner than being exposed by the hacker months and months after the breached the server. In summary, for most people familiar with the incident and security, its not the breach itself that is most worrying but rather NordVPN's behaviour which led to it happening, how it went unnoticed for so long and the way in which they have tried to handle the aftermath. A non-tech non-security company could be excused for not handling things well, but a tech/security company should have handled it far better - would you buy a home security system from a company that was installed in a home that got broken into and not detected for over 6 months.. even if nothing in the house was stolen?
    1