3 ms·
If DO-178B were to be applied to "internet" I would not be surprised if we were thinking that uucp is amazing invention in 2018. I'm going to repeat it again -
by notyourday 8y ago
If DO-178B were to be applied to "internet" I would not be surprised if we were thinking that uucp is amazing invention in 2018.
I'm going to repeat it again - we do not have a security problem with software. We have a risk management problem.
There's absolutely no reason for Marriott store information on previous guests past certain statue of limitations. In fact, they could probably offloaded it to Iron Mountain after 180 days. Storing it online has a certain risk profile. That risk was not correctly evaluated ( probably not evaluated at all ) and hence it was not minimized.
Storing credit card information ( even encrypted ) after the card was charged and transaction creates another risk profile. It also was not evaluated and it was not mitigated.
Businesses are obsessed with data without understanding the risk.