3 ms·
If that's the case, we must assume then that any recommendations they made were summarily ignored, given the subsequent breach in July?
by ams6110 9y ago
If that's the case, we must assume then that any recommendations they made were summarily ignored, given the subsequent breach in July?
- travmatt 9y agoYou also have to look at the scope of the work performed too, wouldn't you?
- ams6110 9y agoHard to imagine a competent security review would not point out "Your entire database is accessible directly from the web server and you have no verified plan or demonstrated capability to deploy security patches to the web server within a reasonable timeframe"
- qaq 9y agoThey did not disclose details of the engagement so hard to speculate on anything. It somewhat unusual for the name to be disclosed though.
- kitotik 9y agoThat caught my eye as well. It would not be a bad strategy at all to leak the names of as many potential scapegoats as possible if one were avoiding accountability.