4 ms·

The last breach was November of of 2018 . They have had a year and a half to fix their abysmal security practices. Instead they choose to focus their efforts in

The last breach was November of of 2018 . They have had a year and a half to fix their abysmal security practices. Instead they choose to focus their efforts in that time on a ridiculous branding juggernaut("Bonvoy".) Seriously fuck this company. I hope people vote with their wallet.

elipsey 7y ago
Every Marriott I have ever been in was chosen for me, because of their business-friendly group booking system. There's an agent-principle problem with hotels that rely on corporate group rate and conference customers. I went to the fedex store in a Marriott a couple of blocks from here to drop off a pre-paid parcel, and they wanted a $20 "convenience" fee to leave it on the desk. Maybe Marriott doesn't need to care about guest infosec because guests are the product, not the customer. I mean, no one pays $27 of their _own_ money for a continental breakfast...
- Keverw 7y ago
  Wow, never heard of paying to drop off a package. Is that common? I thought the shipping fees or postage if gov post office is what’s suppose to pay for that.
  - elipsey 7y ago
    I think the Fedex Store is operated by a private firm, and can therefore charge whatever it likes.
- bogomipz 7y ago
  Sure but I meant in the general sense. Even if they are mostly corporate bookings it's not great for a company if their employees personal details are there for the easy taking. Company's can and do change travel their travel policies as well.
imroot 7y ago
Disclaimer: I did a lot of the work for marriott.com to run Microservices about 3+ years ago. With that said, this is surprising to me: Information Protection at Marriott was one of the biggest hurdles to get the new version of their .com up and running, and the 2018 hack came from the Starwood Acquisition. This one? There's really no good excuse for. Well, forcing employees to change their password every 30 days and keeping 12 months of password retention probably didn't help (super common to just suffix the month/year with your known password to get around that check). Either that, or it was a genuine bad actor/employee inside MI. Anything's possible, I guess.

elipsey 7y ago

Every Marriott I have ever been in was chosen for me, because of their business-friendly group booking system. There's an agent-principle problem with hotels that rely on corporate group rate and conference customers. I went to the fedex store in a Marriott a couple of blocks from here to drop off a pre-paid parcel, and they wanted a $20 "convenience" fee to leave it on the desk. Maybe Marriott doesn't need to care about guest infosec because guests are the product, not the customer. I mean, no one pays $27 of their _own_ money for a continental breakfast...

Keverw 7y ago
Wow, never heard of paying to drop off a package. Is that common? I thought the shipping fees or postage if gov post office is what’s suppose to pay for that.
- elipsey 7y ago
  I think the Fedex Store is operated by a private firm, and can therefore charge whatever it likes.
bogomipz 7y ago
Sure but I meant in the general sense. Even if they are mostly corporate bookings it's not great for a company if their employees personal details are there for the easy taking. Company's can and do change travel their travel policies as well.

imroot 7y ago

Disclaimer: I did a lot of the work for marriott.com to run Microservices about 3+ years ago. With that said, this is surprising to me: Information Protection at Marriott was one of the biggest hurdles to get the new version of their .com up and running, and the 2018 hack came from the Starwood Acquisition. This one? There's really no good excuse for. Well, forcing employees to change their password every 30 days and keeping 12 months of password retention probably didn't help (super common to just suffix the month/year with your known password to get around that check). Either that, or it was a genuine bad actor/employee inside MI. Anything's possible, I guess.