3 ms·
Yeah, you are completely right, and I completely agree, as I imply later in the post. Such mistakes are extremely common across the spectrum, at companies large
by cookiecaper 10y ago
Yeah, you are completely right, and I completely agree, as I imply later in the post. Such mistakes are extremely common across the spectrum, at companies large and small alike (remember when American Express accidentally exposed an internal debugging application? [0] :O). Cybersecurity is still very difficult for everyone, and I don't mean to imply any differently.
My quip was meant to emphasize that the security breaches described are basic, and likely could've been blocked if the DNC had, at the time, been following good security practice. Many corporations withstand such attacks routinely (and as you note, many don't).
The penetration of the DNC was not something that required professional-level skill, let alone the resources of a nation-state.
[0] http://www.securityweek.com/amex-developers-leave-debug-tool-open-world-including-attackers http://www.securityweek.com/amex-developers-leave-debug-tool...
- nutate 10y agoWhat it really requires is the blind eye (or knowing nod) of a nation state, since with the level of unuttered evidence (and the private orgs named which no one seems to be mentioning here) the idea that "we won't prosecute you if you do this" is the nation-state sophistication here. In the US you'd normally face justice for this, regardless of the locale or the ease of the break-in.