Re:Two top Equifax execs to retire after security breach
by JonMR on Friday September 15, 2017 @06:36PM
(#15261393)
Do they not get their apps security scanned? In my experience checking all requests go over HTTPS is the first thing that the security teams check. You'd think since Equifax works with banks they'd force them to adhere to some kind of security testing.
[ Parent
| on HN ]
Re:Two top Equifax execs to retire after security breach
by patcheudor on Friday September 15, 2017 @07:42PM
(#15261759)
Exactly! This is so bad. Way worse IMHO than a failed patch or default admin/admin password in terms of showing a lack of competence. Those are ops issues. This showed core issues in their ability to architect and develop secure code. This wasn't a missed patch or config file, it was flat out not knowing how to write an even remotely secure (on the wire) application.