News for hackers. Stuff that matters.

A comment on The OPM Data Breach [pdf]. Parent comment

Re:The OPM Data Breach [pdf] by danso on Thursday September 08, 2016 @07:39PM (#12458447)
I don't know if "suddenly" is the most accurate word. This attack originated in May 2014 and was identified sometime in mid 2015. https://www.opm.gov/cybersecurity/cybersecurity-incidents/
[ Parent | on HN ]
Re:The OPM Data Breach [pdf] by ipsin on Thursday September 08, 2016 @11:07PM (#12459412)
The crazy thing to me was that the 2015 discovery was reportedly [1] due to a "product demo".

Of course, I expect that the company was entirely legitimate, but running an intrusion detection company would apparently be great cover for gaining free vulnerability scans of potential targets.

[1] http://arstechnica.com/security/2015/06/report-hack-of-gover...

[ Parent | on HN ]
Re:The OPM Data Breach [pdf] by revelation on Thursday September 08, 2016 @07:44PM (#12458483)
That is light speed as far as the government is concerned.

You couldn't get an FOIA answered in that time period.

[ Parent | on HN ]
Re:The OPM Data Breach [pdf] by danso on Thursday September 08, 2016 @08:28PM (#12458764)
As luck would have it, that's what the Oversight committee is talking about today: https://oversight.house.gov/hearing/examining-foia-complianc...

Note: Sure, politicians move very quickly when politics are involved.

[ Parent | on HN ]
Re:The OPM Data Breach [pdf] by jamez1 on Thursday September 08, 2016 @11:41PM (#12459513)
FOIA aren't exactly something the government cares about, don't think that's an apt comparison
[ Parent | on HN ]