Well, I guess maybe it doesn't look so good, as Dan Goodin points out that most of this disclosure only came after they became aware of what he was publishing.
Well, I guess maybe it doesn't look so good, as Dan Goodin points out that most of this disclosure only came after they became aware of what he was publishing.
It is essentially inevitable that any service will get compromised eventually. The question is how often if happens and how they react when it does. So far it sounds like #1Password has mostly refused comment when contacted by reporters, and that is honestly what makes me most nervous so far. They did post a blog post about the incident (complete with a more detailed internal report that was referred to in the articles)
https://blog.1password.com/okta-incident/
which is good, but I don't think they've yet sent out an email to users, which seems like an important part of transparency.