4 ms·
Confused. Some sources are reporting this was a zero-day vulnerability only recently discovered. I'm as emotionally upset as anyone else, but if in fact this w
by matchagaucho 9y ago
Confused. Some sources are reporting this was a zero-day vulnerability only recently discovered.
I'm as emotionally upset as anyone else, but if in fact this was a zero-day, I also lose the basic lack of security practices argument.
https://qz.com/1073221/the-hackers-who-broke-into-equifax-exploited-a-nine-year-old-security-flaw/ https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...
- kromem 9y agoEven with an 0-day, why was consumer data not encrypted at rest with segmentation for access? If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?
- matchagaucho 9y agoTrue. A flaw in the perimeter doesn't forgive poor data management practices. Given the number of FS sites running on IBM Websphere and Struts, this may only be the tip of iceberg.
- omilu 9y agoFS == Financial Service???