Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
g051051
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
128 ms
·
541.
▲
by
g051051
9y ago
> Equifax it seems gets to skip the whole "plead guilty" thing and just announced their negligent failure directly to the world. You're presuming that Equifax is guilty of something. Of what? Of being victims of a hack?
542.
▲
by
g051051
9y ago
> Then they started tweeting out links to a phishing site that looked just like their own "equifaxsecurity2017" site. Not much to say about that one, for sure. I still don't understand why they wanted to make a completely
543.
▲
by
g051051
9y ago
> I'm arguing that we have two other credit reporting agencies that appear to be functioning properly, and one that looks like it is in a continuing state of dysfunction. I strongly suggest you do some research about that. You'
544.
▲
by
g051051
9y ago
You don't have to provide consent to having a CRA host "your" data, because you're not the customer unless you buy a product from one of them. CRAs are regulated by the government, with things like GLBA, CFPB, FCRA, and
545.
▲
by
g051051
9y ago
> I guess the time between "tech person discovers a security breach" and "top executives discover it's a huge embarrassing crisis" is more than a couple of days. That's exactly right. I can imagine the grad
546.
▲
by
g051051
9y ago
> Just because you worked at a place with good security hygiene, it makes no difference to the world at large. Everybody else looks like Equifax. Equifax did have good security hygiene. But they didn't have perfect security hygiene
547.
▲
by
g051051
9y ago
It's asking for the last 6 digits of SSN and name. Considering that is 1 million unique numbers, out of 146 million potentially compromised accounts, you could probably put any number in there and be reasonably sure of getting a hit.
548.
▲
by
g051051
9y ago
Yeah, I just tried to add this via the Equifax link, entered all of my info, and got an instant "the system is down" error. Edit: Experian displays a grey screen that says "Loading" Edit: TransUnion requires I set up an
549.
▲
by
g051051
9y ago
> Best case scenario (for the organization) is that it is fined directly into bankruptcy and someone like FIS acquires them for pennies on the dollar. I am still waiting for CFPB to drop a nuclear bomb over this issue. There is zero chan
550.
▲
by
g051051
9y ago
> What is the incentive for congress to enact laws regulating corporate handling of consumer data? The already did, it's called the Gramm–Leach–Bliley Act: > In terms of compliance, the key rules under the Act include The Financi
551.
▲
by
g051051
9y ago
They weren't "dumping stock". They sold a small percentage of their holdings. They have much larger stakes in Equifax than what was sold.
552.
▲
by
g051051
9y ago
A silly and baseless claim. The executives didn't know about the breach at the time of sale, and it wasn't "covered up". It's standard industry procedure to first stop an intrusion, investigate the scope, contact
553.
▲
by
g051051
9y ago
Where do you think the analyst got their information? Companies routinely share such things so that the analysts can get updated guidance out and prevent excessive panic from investors.
554.
▲
by
g051051
9y ago
Take a look at the analyst outlook and decide if you still think that's going to happen: https://baird.bluematrix.com/docs/pdf/dbf801ef-f20e-4d6f-91c...
555.
▲
by
g051051
9y ago
What do you mean, "let it die"? Do you honestly think there's even a shred of possibility that Equifax would go out of business?
556.
▲
by
g051051
9y ago
> In addition, credit card numbers for approximately 209,000 consumers and certain dispute documents, which included personal identifying information, for approximately 182,000 consumers were accessed. That's not "half of U.S.
557.
▲
by
g051051
9y ago
I'd guess that it didn't rely on the security of a web server, but the entry point was the "thin end of the wedge" for probing and deploying more sophisticated attacks. At some point, the front end of any web applicati
558.
▲
by
g051051
9y ago
What "sensitive financial data"?
559.
▲
by
g051051
9y ago
Finally a breath of fresh air and reason amidst all of the fear mongering and anti-CRA FUD. The system isn't perfect, and consumers are definitely at risk...but it's far more important to really understand the relationship and in
560.
▲
by
g051051
9y ago
Are you kidding? This is a 100% instant dismissal if it even gets to a judge. The allegations are groundless...the plaintiffs have no knowledge of Equifax's security systems in order to have any sort of standing to make any claims re
561.
▲
by
g051051
9y ago
You're what's called a "consumer", as in "Consumer Financial Protection Bureau". You're only a "customer" of Equifax if you purchase one of their products. The CRAs don't make or break your
562.
▲
by
g051051
9y ago
> I have control over how I secure my car from being stolen. Really? Those were your exact words, in the context of claiming that your ability to secure your car made the comparison to identity theft invalid.
563.
▲
by
g051051
9y ago
Which makes your statement (that you have sufficient control to prevent the possibility of theft of your property) completely invalid. You can do everything right, and through no fault of your own have things go wrong.
564.
▲
by
g051051
9y ago
Your statement is nonsense. Regardless of your efforts, the best you can ever hope for is to minimize the chance of your car being stolen. You can never prevent it completely. If your car is stolen in spite of your best efforts, are you
565.
▲
by
g051051
9y ago
> It is Experian, Transunion and Equifax, by holding this fraudulent loan against Alice, who are victimizing Alice. Credit Reporting agencies report the data passed to them by companies such as banks. In your scenario BigBank thinks it&
566.
▲
by
g051051
9y ago
You're assuming mismanagement...but there's simply no way to guarantee perfect computer security.
567.
▲
by
g051051
9y ago
So you're saying that companies that get hacked are "asking for it", or are complicit in the criminal activity? That's an incredibly broad stretch.
568.
▲
by
g051051
9y ago
Why do you think Equifax (or Home Depot, or Target) is any less of a victim here?
569.
▲
by
g051051
9y ago
Accountable for what? That they're a target for hackers, who managed to break into their network? How is that careless? There's no such thing as perfect security.
570.
▲
by
g051051
9y ago
Well, they try to find and convict the hackers, of course. Or did you mean the companies like Equifax, or Target, or Home Depot that are the victims of the break-ins?
More ›