3 ms·
Yes! What does it say about internal security if a bank leaves its mailbox unlocked. (The postal equivalent of not using SSL.) For those that would prefer othe
by lolc 8y ago
Yes! What does it say about internal security if a bank leaves its mailbox unlocked. (The postal equivalent of not using SSL.)
For those that would prefer other methods because public shaming doesn't fix everything: Let's look at some scenarios what (successful) shaming of publicly available services could do:
1. lead to audit and discovery of the issues in the internal services
2. bolster the argument of internal people who argue for security improvements
3. reset priorities to fix issues in public instances instead of fixing internal ones
- user5994461 8y agoIt's not comparable. A mailbox is in a physical location and you have to be next to it to use it. An email box is specifically meant to be opened anytime from anywhere on the planet. It's insecure by design.
- lolc 8y agoAgreed but I wanted to compare an unlocked mailbox at a bank to not using SSL on their website.