3 ms·

Check out Defense in Depth as a security concept

• Dylan16807 1y ago
  It's not defense in depth, it's defense against a different threat entirely. You want to have encryption, but I doubt their encryption or lack thereof has anything to do with this attack. Do we even have evidence the data wasn't encrypted?. If someone gets access to a ticketing system they shouldn't have, talking about encryption is about as useful as talking about seatbelts. Important for general safety but irrelevant to the problem at hand.