4 ms·
Genuinely think cyber has a massive overengineering problem - I havent worked with Kaiser but am under the impression they run quite a sophisticated op, with a
by waihtis 2y ago
Genuinely think cyber has a massive overengineering problem - I havent worked with Kaiser but am under the impression they run quite a sophisticated op, with a lot of advanced modeling done for vulns & cyber risk in general. Yet they got pounded pretty hard here.
Creeping suspicion is too much focus on doing ”smart” things with data, AI and such and not enough on actually worrying about not getting breached.
- deleted 2y ago[deleted]
- thephyber 2y ago> Yet they got pounded here Huh? Your passive tense suggests this happened to KP’s teams. From what I’m reading, those are the teams who would have had to actively take action to import the tracking code on their pages. My money is on “we imported a thing on the website because our advertising team needed to know when advertised users converted from any of many different advertising channels”. Usually it’s easier to import a script on a common layout, rather than just a single landing page. Ad teams overrule the website / security teams because one is a profit center and the other is a cost center. Then as engineers / product teams turn over, the new employees don’t know the original intention of the old imported code and are wary to remove it (and if they do, the process is long and drawn out).