Hacker News new | ask | show | jobs
by wepple 928 days ago
I imagine everyone is finger-pointing.

Booking.com says the hotel is at fault for having their credentials leaked; the hotel says booking.com failed to protect their account, the bank says the user was phished so it’s not their fault.

IMO if booking.com offers a messaging service which lends far more authority than “just a random person SMSing you” then they’re on the hook for this.