Re:Two top Equifax execs to retire after security breach
by rdtsc on Friday September 15, 2017 @06:44PM
(#15261454)
> Everybody is insecure everywhere always,
Not everyone has this amount of personal data, including social security numbers, names, credit history on 140M Americans. So no, it' not "just like everybody"
> N is very small -- maybe four?
That is a ridiculously long time for a company holding the kind of data they are. "Yeah, yeah enterprise whatevs, I know". But I work in enterprise as well and we patch and roll out security updates within days. Like you said, it is mostly "apt-get upgrade" run from Chef or whatever management system they got.
> "they failed to run the equivalent of sudo apt-get upgrade on their framework."
Don't agree with that. It's like saying "The train conductor _just_ had to press the break in time. It's a simple action. Let's not overreact here..."
> machines, this is a situation that almost all of us have wound up in.
I somehow never wound up holding personal data of 140M people. And if someone told me to "hold that data", I'd say "sorry, I am not qualified, it is highly likely I'll mismanage it and it will be hacked".
> Are you sure you won't be next on the chopping block?
No it's not. Because I don't have the personal or financial data of that many people in my care.
Not everyone has this amount of personal data, including social security numbers, names, credit history on 140M Americans. So no, it' not "just like everybody"
> N is very small -- maybe four?
That is a ridiculously long time for a company holding the kind of data they are. "Yeah, yeah enterprise whatevs, I know". But I work in enterprise as well and we patch and roll out security updates within days. Like you said, it is mostly "apt-get upgrade" run from Chef or whatever management system they got.
> "they failed to run the equivalent of sudo apt-get upgrade on their framework."
Don't agree with that. It's like saying "The train conductor _just_ had to press the break in time. It's a simple action. Let's not overreact here..."
> machines, this is a situation that almost all of us have wound up in.
I somehow never wound up holding personal data of 140M people. And if someone told me to "hold that data", I'd say "sorry, I am not qualified, it is highly likely I'll mismanage it and it will be hacked".
> Are you sure you won't be next on the chopping block?
No it's not. Because I don't have the personal or financial data of that many people in my care.