5 ms·

My guess, with AT&T being an enormous and ancient corporation long past it's glory days, is that internally its a stale mess serviced by people unwilling to div

My guess, with AT&T being an enormous and ancient corporation long past it's glory days, is that internally its a stale mess serviced by people unwilling to dive into it. The breach did happen, but things under the hood are so bad that they have no idea it happened. The layers of incompetence and don't-give-a-fuck completely obscure the evidence. The IT team, staffed mostly by young green cards who weren't even in this country 3 years ago, stare blankly at AT&T's internal auditing system developed in the 90's with a long dead and strictly proprietary language. Doesn't matter because the system didn't even catch the breach anyway. As you move up the chain, people just get more divorced from reality as they live in the delusion of AT&T still being a forefront technology company. So of course the breach didn't happen to them. At least that it my theory.

alephnerd 3y ago
[flagged]
- Workaccount2 3y ago
  So you are confident that they didn't leak this data? Also, young green card in this context is synonymous with cost cutting. Young being inexperienced, green card being cheap. I apologize if you racially identify as green card.
  - alephnerd 3y ago
    [flagged]
    - Workaccount2 3y ago
      ATT is equally responsible for data leaks from companies they share data with. Our company takes in data from others and their auditing is rigorous. It's not much of a better look to be seen handing out customer data willy-nilly.
      - alephnerd 3y ago
        > ATT is equally responsible for data leaks from companies they share data with. Liability from 3rd party breaches are avoided if the 3rd party has shown that they did their due diligence in maintaining their security. If they show that they are in SOC 1/2 compliance along with other similar compliance frameworks, that is enough. > auditing is rigorous Having dealt with and seen this from SMEs to F10s I guarantee you it's nowhere near as rigorous as you expect, and that this is a common issue across all organizations - even some darlings on HN that people view as deeply technical. Everyone has their pants off.
  - haliskerbas 3y ago
    You could have just said cheap and or inexperienced. Adding “green card” and the part about not being from here adds a layer of political and racial under tone even though green card isn’t necessarily a race. When they called me curry girl it was a racist remark even though curry is not a race.
    - Nextgrid 3y ago
      Green card/implication of foreign labor does add an extra bit of information beyond just inexperience - it's that they are likely to be less acquainted with the laws/regulations which means they can be convinced to do illegal things and are less likely to know their rights and stand up to bad/illegal treatment by their employer.
      - deleted 3y ago
        [deleted]
dogtierstatus 3y ago
Your theory is definitely plausible. Source: Worked sometime for a subcontractor of a subcontractor of AT&T from a third world country.
Nextgrid 3y ago
That is correct. This kind of large legacy company has zero engineering culture. Engineering is not rewarded nor empowered to do its job well and is sometimes seen as a threat (engineering working too wall = entire departments could become redundant), which means nobody competent joins/stays there and only mediocrity remains.

alephnerd 3y ago

[flagged]

Workaccount2 3y ago
So you are confident that they didn't leak this data? Also, young green card in this context is synonymous with cost cutting. Young being inexperienced, green card being cheap. I apologize if you racially identify as green card.
- alephnerd 3y ago
  [flagged]
  - Workaccount2 3y ago
    ATT is equally responsible for data leaks from companies they share data with. Our company takes in data from others and their auditing is rigorous. It's not much of a better look to be seen handing out customer data willy-nilly.
    - alephnerd 3y ago
      > ATT is equally responsible for data leaks from companies they share data with. Liability from 3rd party breaches are avoided if the 3rd party has shown that they did their due diligence in maintaining their security. If they show that they are in SOC 1/2 compliance along with other similar compliance frameworks, that is enough. > auditing is rigorous Having dealt with and seen this from SMEs to F10s I guarantee you it's nowhere near as rigorous as you expect, and that this is a common issue across all organizations - even some darlings on HN that people view as deeply technical. Everyone has their pants off.
- haliskerbas 3y ago
  You could have just said cheap and or inexperienced. Adding “green card” and the part about not being from here adds a layer of political and racial under tone even though green card isn’t necessarily a race. When they called me curry girl it was a racist remark even though curry is not a race.
  - Nextgrid 3y ago
    Green card/implication of foreign labor does add an extra bit of information beyond just inexperience - it's that they are likely to be less acquainted with the laws/regulations which means they can be convinced to do illegal things and are less likely to know their rights and stand up to bad/illegal treatment by their employer.
    - deleted 3y ago
      [deleted]

dogtierstatus 3y ago

Your theory is definitely plausible. Source: Worked sometime for a subcontractor of a subcontractor of AT&T from a third world country.

Nextgrid 3y ago

That is correct. This kind of large legacy company has zero engineering culture. Engineering is not rewarded nor empowered to do its job well and is sometimes seen as a threat (engineering working too wall = entire departments could become redundant), which means nobody competent joins/stays there and only mediocrity remains.