3 ms·
This story was big news when it happened and I'm grateful to Andy Greenberg for writing this retrospective. Pretty much nothing has changed about security at co
by NelsonMinar 5y ago
This story was big news when it happened and I'm grateful to Andy Greenberg for writing this retrospective. Pretty much nothing has changed about security at companies in the last ten years that would foil this kind of attack. I mean maybe folks are a little smarter about catching spearfishing Office docs, and Flash exploits are now a thing of the past, but those are replaced by contemporary equivalents. And I'm sure conveniences like the not-quite-airgapped crucial equipment still persist. We truly have no idea how to secure systems on the Internet.
As for RSA, it came out a couple years later their products were compromised various ways by the NSA. Then a couple years later the NSA lost control of its own hacking tools with the infamous Shadow Brokers release. Not only is building secure systems hard, but the US government actively works to undermine its own companies' security.
https://www.reuters.com/article/idUSBRE9BJ1C220131220?irpc=932 https://www.reuters.com/article/idUSBRE9BJ1C220131220?irpc=9...
https://arstechnica.com/information-technology/2014/01/how-the-nsa-may-have-put-a-backdoor-in-rsas-cryptography-a-technical-primer/ https://arstechnica.com/information-technology/2014/01/how-t...