Experian Vulnerability Shows Any Report with just SSN, DOB, ADR
Am I reading correctly that Krebs gave the vendor <i>three full days</i> (of which at least three are not working days), over the Christmas holiday to patch this before disclosure on Mastodon?<p>I can understand (but not necessarily agree) with arguments for full disclosure when the consumer has a choice to avoid using the vendor .. but, in this case?