Experian Vulnerability Shows Any Report with just SSN, DOB, ADR
Am I reading correctly that Krebs gave the vendor three full days (of which at least three are not working days), over the Christmas holiday to patch this before disclosure on Mastodon?I can understand (but not necessarily agree) with arguments for full disclosure when the consumer has a choice to avoid using the vendor .. but, in this case?