3 ms·

I'm surprised banks even allow USB based storage devices to be connected. There are tools you can run on managed systems to block these devices from being able

• acdha 3y ago
  I agree but there’s probably selection bias here: the place which doesn’t deactivate accounts when they fire people is so dysfunctional that it’s no longer surprising that they botched harder controls.
• from-nibly 3y ago
  banks are just like every other company. Don't assume your bank knows what it's doing just cause it's a bank. Their core product isn't security, it's financial services. They benefit from security sure, but they don't profit off of it directly. They are going to have the bare minimum security, to make everyone feel like they will stay out of the headlines.
  • nickjj 3y ago
    Financial services tend to have a lot of compliance related things thrown at them. The crazy thing is, it wouldn't surprise me if they did this on purpose to capitalize in the future. How else can they get $529,000 to copy git repos from a backup back up onto GitHub? Unless maybe they have no backups in which case, how is it possible that a banking institution could have code that lasted 50+ years without backups. Also the damages without backups would likely be more than $529,000 because they just lost the entire history of their apps.