3 ms·
The entire credit system is a security nightmare. They all appear to use very basic "security" that has not been upgraded along with the rest of the world. Conf
by tylersmith 9y ago
The entire credit system is a security nightmare. They all appear to use very basic "security" that has not been upgraded along with the rest of the world. Conflating identity and authorization, using deterministic values instead of random ones when necessary, and even for Equifax plain old sending people to the wrong domain.
- subway 9y agoWhy limit it to just the credit system? Security is always an afterthought. Even if a company is marketing itself as a security oriented company, you can bank on the marketing itself being valued more by the organization than any sort of safeguard for protecting the customer ('subjects' may be a more apt descriptor in this case.) And while I'd love to blame the bankers on this, I feel the blame is 100% at the feet of sysadmins and developers who decided getting paid was more important than doing the right fucking thing. Now gimmie my downvotes, you spineless bastards (and the sociopaths you bend over for).
- grzm 9y ago> Now gimmie my downvotes, you spineless bastards (and the sociopaths you bend over for) Just please leave this off. The guidelines ask us to, and if you're worried about down votes, being aggressive and rude isn't going to help matters.
- IncRnd 9y agoThat's not how it normally works. Sysadmins and Devs don't usually have the ability to decide the strategic direction of a company