4 ms·
For those that missed it, I suggest this look at how comically bad security was (is) at OPM, to the point there were security reports saying the loss of product
by magicalist 11y ago
For those that missed it, I suggest this look at how comically bad security was (is) at OPM, to the point there were security reports saying the loss of productivity by shutting down the database completely would be preferable to the ridiculously vulnerable state it was in. No one listened.
http://arstechnica.com/security/2015/06/epic-fail-how-opm-hackers-tapped-the-mother-lode-of-espionage-data/ http://arstechnica.com/security/2015/06/epic-fail-how-opm-ha...
- droopybuns 11y agoTL;DR: No 2 factor auth, yer dead? I am having an impossible time following this story. So vague. Thanks for the most descriptive link yet (although still totally lacking). I watched the cspan event and all I could derive was that inadequate logging meant they couldn't say how bad the event was. Totally unclear.
- higherpurpose 11y agoIf you have 4 hours to kill, this House hearing video clears many things (about how incompetent, but also how dismissive both Archuleta and Donna Seymour, the CIO, were - Seymour still not fired yet). https://www.youtube.com/watch?v=pVPPTooB80E https://www.youtube.com/watch?v=pVPPTooB80E And this is part 1: https://www.youtube.com/watch?v=Ass73n7lH0c https://www.youtube.com/watch?v=Ass73n7lH0c