16 ms·
Most of the security higher-ups at Equifax interviewed for this report seem pretty humble. Most admitted they made some mistakes and oversights that allowed a p
by halter73 7y ago
Most of the security higher-ups at Equifax interviewed for this report seem pretty humble. Most admitted they made some mistakes and oversights that allowed a publically accessible Apache Struts server containing so much private data to go unpatched for months leading to the massive breach. The "former Countermeasures Manager" appears to have learned nothing from the breach however.
> The former Countermeasures Manager at Equifax served in an acting and
then permanent capacity from 2016 to 2017. He believed Equifax suffered a
cybersecurity breach because of a “sophisticated” and “highly motivated”
adversary. He added that, “if asset management was a perfect silver bullet then
perhaps this may not have happened.” He told Subcommittee staff that he does
not think the Countermeasures team could have done anything differently in
response to the March 2017 vulnerability. He was as surprised as anyone that
Equifax suffered a breach because of the “combination of the sophistication of the
attack and the talent at Equifax. We had rock stars at Equifax who were de facto
pillars in the field.” The former Countermeasures Manager believes the response
to the vulnerability was “not only defensible, but justifiable.”
- meddlepal 7y agoPosturing for his next management/executive gig.
- deleted 7y ago[deleted]
- kjar 7y ago“Rockstars” OK?
- lawnchair_larry 7y agoOuch. I’m pretty comfortable asserting that Equifax most certainly did not have “pillars in the field” on staff. Not to say they were all incompetent, but that’s a Trump-level exaggeration. This former Equifax “countermeasures manager” is apparently woefully unqualified for any security job. Not because they were breached, but just because of how out of touch he is with every statement he makes.
- ethbro 7y agoWoefully unqualified people seem to hang around in executive security positions, because it's all hypotheticals until things go boom. So bullshit artists flourish.
- mxcrossb 7y agoI agree with him actually. Which is why a company like equifax should be regulated out of existence. The only way to secure such a database is to make sure it never existed in the first place.