Hackers who broke into Equifax exploited a flaw in open-source server software

Re:Hackers who broke into Equifax exploited a flaw in open-s... by nol13 on Friday September 08, 2017 @08:09PM (#15204875)

So if someone takes this data and just keeps the whole dataset exposed publicly on a tor site, is that pretty much the end of data breaches?

Like, some random website: "we just got hacked, all you pii was taken, but don't worry nothing thats not already available in that public database"

other than new credit card #'s it'd be basically pointless right?

[ Parent | on HN ]

Re:Hackers who broke into Equifax exploited a flaw in open-s... by jklein11 on Saturday September 09, 2017 @10:28AM (#15207224)

The fact that the pii existed is more systemic. We use social security numbers to verify identity and have a unique way of identify people across systems. If our current system of doing this (i.e. SSNs) are no longer reliable we will have to come up with something to replace it. If what we use to replace it is as brittle of a solution we will run into a similar problem down the road.

[ Parent | on HN ]

Re:Hackers who broke into Equifax exploited a flaw in open-s... by sattoshi on Friday September 08, 2017 @08:56PM (#15205019)

Well... no.

Everybody on that list will change their CC and life carries on until the next breach.

[ Parent | on HN ]

Re:Hackers who broke into Equifax exploited a flaw in open-s... by nol13 on Friday September 08, 2017 @10:19PM (#15205229)

well ya thats the point, credit card breaches may still happen but those are easy to cancel, but all the PII would be permanently in the public domain.

[ Parent | on HN ]