4 ms·
I don't know, how can you reasonably defend from that sort of domain hijacking/repurposing? We fundamentally have to trust DNS at some level, but domain names
by g051051 9y ago
I don't know, how can you reasonably defend from that sort of domain hijacking/repurposing? We fundamentally have to trust DNS at some level, but domain names are somewhat transient in nature. Is it fair to single out Equifax here, or is this just an example of an unsolved problem in the industry?
- tyingq 9y agoSomebody used to log into the backend that showed them the statistics. Surely they noticed when it disappeared? Security scans also usually include breakdowns of 3rd party stuff. But yes, there's ways it could go wrong. On the other hand, Equifax is one of very few places that has so much important data. I'd expect them to be leaders in this space, not lackluster followers. Subresource integrity, perhaps more due diligence on partners...stick with bigger players for code that shows up on your site, etc.
- g051051 9y agoI'd have to guess that someone cancelled the analytics at the business level, but never bothered to write up a change request to tell the devs to take it out.