backtracking on statements "we weren't breached" "highly sophisticated attacker" (dude with chrome inspector) "no evidence it was exploited" (because there were no logs) plaintext passwords "nobody is perfect" threaten to call police on white hat >100k accounts breached not fixed until publicly disclosed data privacy commissioner not notified in time "[the white hat] is breaking the law" "we are investigating" "there are no issues" public s3 / elasticsearch "don't worry your data is safe" "only a small portion of our users" "it was only for a few minutes" really easy, like really easy to exploit no security team "our app/website experienced some issues" ignore it and hope it goes away easily disproved lie more users affected than initially thought "someone's out to get us" backtracking on statements "we weren't breached" "highly sophisticated attacker" (dude with chrome inspector) "no evidence it was exploited" (because there were no logs) plaintext passwords "nobody is perfect" threaten to call police on white hat >100k accounts breached not fixed until publicly disclosed data privacy commissioner not notified in time "[the white hat] is breaking the law" "we are investigating" "there are no issues" public s3 / elasticsearch "don't worry your data is safe" "only a small portion of our users" "it was only for a few minutes" really easy, like really easy to exploit no security team "our app/website experienced some issues" ignore it and hope it goes away easily disproved lie more users affected than initially thought "someone's out to get us"
(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.
backtracking on statements
"we weren't breached"
"highly sophisticated attacker"
(dude with chrome inspector)
"no evidence it was exploited"
(because there were no logs)
plaintext passwords
"nobody is perfect"
threaten to call police on white hat
>100k accounts breached
not fixed until publicly disclosed
data privacy commissioner
not notified in time
"[the white hat] is breaking the law"
"we are investigating"
"there are no issues"
public s3 / elasticsearch
"don't worry your data is safe"
"only a small portion of our users"
"it was only for a few minutes"
really easy, like really easy to exploit
no security team
"our app/website experienced some issues"
ignore it and hope it goes away
easily disproved lie
more users affected than initially thought
"someone's out to get us"