Under the assumption that the story is true, thing that I cannot assume from a blog post, this should be notified to the authorities more than be posted on HN.
Also notice that before any actual confirmation or official investigation, pointing fingers trying to find companies that match the description could be a criminal offense as well as you could damage the reputation of totally fine companies.
> Also notice that before any actual confirmation or official investigation, pointing fingers trying to find companies that match the description could be a criminal offense as well as you could damage the reputation of totally fine companies.
Well, I mean, that's already been done, but I don't see any criminal law that could remotely be applicable. What crime do you imagine this is?
Heck, I don't even see how posting "it appears from details in the article that it is talking about WrkRiot" could even be civil defamation, even if taking other things into account (Such as the source article) the net effect is damaging. Even if the source article would, if deanonymized, be defamatory.
Damaging reputation alone isn't generally actionable, at least in US law. Knowingly (or recklessly) making false statements that damage a company may be.
Also notice that before any actual confirmation or official investigation, pointing fingers trying to find companies that match the description could be a criminal offense as well as you could damage the reputation of totally fine companies.