4 ms·
Looking from the end user end it seems nice, but will soon be weaponized in all possible mannar, sloppily executed, and too much data to ingest. For reference
by folmar 5y ago
Looking from the end user end it seems nice, but will soon be weaponized in all possible mannar, sloppily executed, and too much data to ingest.
For reference there is mandatory disclosure of (serious) data breaches in the GPDR and it's very uncommon that the disclosure actually occurs.
- rhizome 5y agoTarget should have had difficulty surviving as a company as a result of penalties-if-not-prison for their 2013 breach, but we see what happened there.
- bigiain 5y agoShould that same existential penalty be applied to every company who had Log4J running in prod a few months back? That was a much more widespread root compromise...
- lallysingh 5y agoVulnerability != Compromise
- rhizome 5y agoNot comparable. Log4j was a vulnerability in the software, not leaving their shit open and and putting all their cash registers on an intranet available to the internet. https://krebsonsecurity.com/2015/09/inside-target-corp-days-after-2013-breach/ https://krebsonsecurity.com/2015/09/inside-target-corp-days-...
- Spooky23 5y agoThat’s a little over the top, eh? They disclosed within 4 days of discovery and implemented better security controls all over. They are probably the only major retailer with chip and pin payments in the US, for example. If you think they were unique or egregious in terms of 3rd party access to networks, i am afraid that you will find reality disappointing.
- cbhl 5y agoI will say I was pleasantly surprised to discover that their store credit card comes without a magstripe on the back
- jacquesm 5y agoThere is no lower bound for reportable personal data breaches: https://gdpr-info.eu/art-33-gdpr/ https://gdpr-info.eu/art-33-gdpr/