3 ms·

What is the intent of admitting this? What happened here is utterly appalling and the employee and a few layers of management above should be fired and prosecut

What is the intent of admitting this? What happened here is utterly appalling and the employee and a few layers of management above should be fired and prosecuted. Haven’t these fools realized the data can be brute forced offline? Are they that stupid to not realize lists of passwords are run against such data?

jamal-kumar 4y ago
It comes from a culture of honor and taking ultimate responsibility for your mistakes in order to preserve this honor through honesty and integrity, all the same which led to the safe return of the data in the end.
- 0des 4y ago
  Good morning Jamal. I've got to admit, I really respect that culture of taking ownership of their mistakes. Other companies could take a page out of their book and do a little good.
  - jamal-kumar 4y ago
    Yeah, I went to school there when I was a teenager. It was an interesting experience to say the least. Much more social cohesion in some ways but definitely a LOT more bullying than I was used to seeing in North America. I got to be friends with the mean gay kids with shaved eyebrows and hot girls due to where I ended up doing my homestay and it was... wow, those kids were MEAN. Never towards me but a few kids in our classes really got the brunt of it. They were insulting their families to their faces in front of the teacher who just completely ignored this happening right in front of him. It's pretty clear in my travels that there's good and bad in pretty much every culture and every country, and that you should focus and celebrate the good while being highly aware of the flip side of things that might be an issue if you are blind to that.
nonrandomstring 4y ago
> What is the intent of admitting this? Incident response always ends on "lessons learned" and it's rarely productive to hide the facts due to political embarrassment. Earliest disclosure also mitigates against much bigger liabilities as a consequence of a leak. > management above should be fired and prosecuted. And be immediately replaced by management with the same level of understanding and responsibility. > Haven’t these fools realized... No. And this is the key point. The biggest thing by FAR in cybersecurity is education. Ordinary people do not have any working model of the threat landscape and basic operational security because they foolishly, blindly trust technology and services providers. We literally need a second digital literacy revolution. One that undoes a lot of the naive and trusting enthusiasm for digitalisation that we inculcated in the 80s and 90s. Unfortunately that goes against the grain of almost every policy that's active out there today.
mola 4y ago
So you would've preferred they lied and covered it up?

jamal-kumar 4y ago

It comes from a culture of honor and taking ultimate responsibility for your mistakes in order to preserve this honor through honesty and integrity, all the same which led to the safe return of the data in the end.

0des 4y ago
Good morning Jamal. I've got to admit, I really respect that culture of taking ownership of their mistakes. Other companies could take a page out of their book and do a little good.
- jamal-kumar 4y ago
  Yeah, I went to school there when I was a teenager. It was an interesting experience to say the least. Much more social cohesion in some ways but definitely a LOT more bullying than I was used to seeing in North America. I got to be friends with the mean gay kids with shaved eyebrows and hot girls due to where I ended up doing my homestay and it was... wow, those kids were MEAN. Never towards me but a few kids in our classes really got the brunt of it. They were insulting their families to their faces in front of the teacher who just completely ignored this happening right in front of him. It's pretty clear in my travels that there's good and bad in pretty much every culture and every country, and that you should focus and celebrate the good while being highly aware of the flip side of things that might be an issue if you are blind to that.

nonrandomstring 4y ago

> What is the intent of admitting this? Incident response always ends on "lessons learned" and it's rarely productive to hide the facts due to political embarrassment. Earliest disclosure also mitigates against much bigger liabilities as a consequence of a leak. > management above should be fired and prosecuted. And be immediately replaced by management with the same level of understanding and responsibility. > Haven’t these fools realized... No. And this is the key point. The biggest thing by FAR in cybersecurity is education. Ordinary people do not have any working model of the threat landscape and basic operational security because they foolishly, blindly trust technology and services providers. We literally need a second digital literacy revolution. One that undoes a lot of the naive and trusting enthusiasm for digitalisation that we inculcated in the 80s and 90s. Unfortunately that goes against the grain of almost every policy that's active out there today.

mola 4y ago

So you would've preferred they lied and covered it up?