4 ms·

I am not sure about origins, but the name they disclosed in their PR is of a very capable outfit.

• ams6110 9y ago
  If that's the case, we must assume then that any recommendations they made were summarily ignored, given the subsequent breach in July?
  • travmatt 9y ago
    You also have to look at the scope of the work performed too, wouldn't you?
    • ams6110 9y ago
      Hard to imagine a competent security review would not point out "Your entire database is accessible directly from the web server and you have no verified plan or demonstrated capability to deploy security patches to the web server within a reasonable timeframe"
  • qaq 9y ago
    They did not disclose details of the engagement so hard to speculate on anything. It somewhat unusual for the name to be disclosed though.
    • kitotik 9y ago
      That caught my eye as well. It would not be a bad strategy at all to leak the names of as many potential scapegoats as possible if one were avoiding accountability.