6 ms·

It's interesting that "your" data is in quotes. I understand what you mean by "your" data and it's a valid point. It's not my data, not in this country anyway

• g051051 9y ago
  > I'm arguing that we have two other credit reporting agencies that appear to be functioning properly, and one that looks like it is in a continuing state of dysfunction. I strongly suggest you do some research about that. You'll find that the other two CRAs have been equally "negligent" at different times. > I just want to know what other kind of business in America would still have any customers after the two weeks that Equifax has just had? Remember the Target data breach? Or the Home Depot breach? How about when Sony was distributing a rootkit on their music CDs? Or when Lenovo was distributing a malware package preinstalled on their laptops? Or when Best Buy was selling digital picture frames that had a virus? The list, sadly, goes on and on and on... > Do you think that Equifax should now have the right to continue operating, all things considered? Of course. Since you're here on Hacker News, I presume you must have some knowledge of computer security...do you really think it was negligence that caused all of this? Do you think that the other CRAs are in any way more secure or less negligent? Or banks? Or any business that uses, say Cisco switches (which have tons of vulnerabilities)? Or businesses that uses Microsoft Windows (too many viruses and worms to count)?
  • yebyen 9y ago
    I'm personally more upset about their continued incompetence in their response to the breach, than about the breach itself. I'm sorry I can't write more right now... First they suppressed valuable information in the form of interviews with their CISO that were public until September 10, when they came down for some reason. Then they started tweeting out links to a phishing site that looked just like their own "equifaxsecurity2017" site. About this time, the CIO and CISO were removed from the picture entirely. A few days later, each of these gaffes became known. Meanwhile they had delayed long past the timeline outlined in legal requirements for their reporting of the breach. Where are the Congressional interviews with their executive directorship? Not on the calendar yet, why don't we schedule it for next February 30th. First of never. I'm just as incensed about the (seeming lack of) response of law enforcement, which admittedly I don't personally have much visibility into, but seems inadequate. At a minimum I would argue that Equifax needs a "time-out." Ideally they would not be handling the response to this situation at all. They should go on the hook to pay someone competent to handle the response.
    • g051051 9y ago
      > Then they started tweeting out links to a phishing site that looked just like their own "equifaxsecurity2017" site. Not much to say about that one, for sure. I still don't understand why they wanted to make a completely separate site with that stupid name. > Meanwhile they had delayed long past the timeline outlined in legal requirements for their reporting of the breach. I think you'll find that they adhered to the letter of the law on that. Maybe you know when Equifax made the breach public, but you don't know when they first contacted the relevant authorities (law enforcement or regulatory). > Where are the Congressional interviews with their executive directorship? Oh, that's coming, for sure. Other companies have been called before congress for far less. But what good has ever come out of such a hearing? That's what you do when you want to save face with the American public and seem like you're going to do something. There might be hope...Al Franken is the ranking member on what I think is the relevant committee, and he usually does a good job in calling out BS when he sees it. > I'm just as incensed about the response of law enforcement How so? What would you expect from law enforcement here?
• njarboe 9y ago
  Equifax's primary customers are the banks and other people who want to check out a persons credit worthiness. They did not leak credit reports. Just think if that information was copied and in the wild, available as a torrent. They would have a lot fewer customers. If you were renting out a place, instead of paying Equifax hundreds of dollars to check the credit of a dozen people, you could just check them out for free. That would be pretty cool. Sort of like the Sci-Hub situation.
  • g051051 9y ago
    That data would get stale very quickly...the window of utility would be a few months at best.