News for hackers. Stuff that matters.

A comment on Equifax Faces Multibillion-Dollar Lawsuit Over Hack. Parent comment

Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack by matchagaucho on Friday September 08, 2017 @07:31PM (#15204735)
Confused. Some sources are reporting this was a zero-day vulnerability only recently discovered.

I'm as emotionally upset as anyone else, but if in fact this was a zero-day, I also lose the basic lack of security practices argument.

https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...

[ Parent | on HN ]
Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack by kromem on Friday September 08, 2017 @07:38PM (#15204754)
Even with an 0-day, why was consumer data not encrypted at rest with segmentation for access?

If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?

[ Parent | on HN ]
Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack by matchagaucho on Friday September 08, 2017 @07:54PM (#15204817)
True. A flaw in the perimeter doesn't forgive poor data management practices.

Given the number of FS sites running on IBM Websphere and Struts, this may only be the tip of iceberg.

[ Parent | on HN ]
Re:Equifax Faces Multibillion-Dollar Lawsuit Over Hack by omilu on Friday September 08, 2017 @10:39PM (#15205287)
FS == Financial Service???
[ Parent | on HN ]