3 ms·
Based on the other thread from yesterday, I wouldn’t jump to conclusions and pin the blame 100% to the former engineer. For such a large company, why the hell d
by treyfitty 6y ago
Based on the other thread from yesterday, I wouldn’t jump to conclusions and pin the blame 100% to the former engineer. For such a large company, why the hell did they not put in safeguards to prevent former employees from accessing production environments? The vulnerability wasn’t like a week or two... it was 5 whole months.
I read this as incompetence on Cisco’s part.
- marcinzm 6y agoIf you leave your front door unlocked that doesn't mean a burglar is free to steal your stuff with no consequences.
- x0x0 6y agoNo one said that? This demonstrates Cisco is shockingly incompetent. Imagine if, instead of basically causing them a business hassle, this engineer decided to grab the list of sales contacts for companies -- easily available by looking at who salespeople are meeting with -- and sell those? It's cisco's job to make this impossible in more robust ways than hoping every employee they have is a good person. Cisco are also liars, because they've almost certainly made commitments in SOC2 or 27001 or other audits that this is impossible via policy and procedures. And yet.