2 ms·
*adds operational expense without a counterparty willing to pay for that expense Those with data on Equifax's servers aren't Equifax's customers, so other than
by ethbro 9y ago
*adds operational expense without a counterparty willing to pay for that expense
Those with data on Equifax's servers aren't Equifax's customers, so other than "not having a PR cluster&#@_" economic incentives are not aligned to prevent this.
- sillysaurus3 9y agoIt's probably best to treat Equifax specially rather than making an example out of them for the rest of the industry to follow.
- concede_pluto 9y agoIf they aren't qualified to design with least privilege, what are they qualified for, beyond maybe cat videos?
- tptacek 9y agoI've spent about half my professional career finding vulnerabilities in the software of developers who are convinced they're "qualified to design with least privilege".