4 ms·
So, am coming back, more than a little humbled... This security story from Canada came out Friday https://www.theregister.co.uk/2019/09/18/scotiabank_code_git
by throwaway201606 7y ago
So, am coming back, more than a little humbled...
This security story from Canada came out Friday
https://www.theregister.co.uk/2019/09/18/scotiabank_code_github_leak/ https://www.theregister.co.uk/2019/09/18/scotiabank_code_git...
am with an FI (financial institution) in the great white north (I am, of course, not speaking for them in any way here) so this is all very very humbling. One theory that I have heard through my network is that event may be the result of agile / sprint work outside regular process ... but it is an unconfirmed rumor... and I do know for a fact that not all platforms are like this...
The assessment of security capability from the guy who found the code + credentials in the wild is brutal! - '"In my experience, this muppet-grade security is perfectly normal for Scotiabank, as they usually leak information once every three weeks on average," Coulls mused.'