News for hackers. Stuff that matters.

A comment on Equifax Releases Details on Cybersecurity Incident, Announces Personnel Changes. Parent comment

Re:Equifax Releases Details on Cybersecurity Incident, Annou... by lowbloodsugar on Friday September 15, 2017 @09:14PM (#15262197)
Conceivably, the attackers spent the 75 days downloading the 143,000,000 records, 2,000,000 records per day, and managed to trigger no scaling alarms as a result. Or perhaps there were no alarms. I wonder if we'll ever know.
[ Parent | on HN ]
Re:Equifax Releases Details on Cybersecurity Incident, Annou... by AlexCoventry on Friday September 15, 2017 @10:33PM (#15262503)
Given the vagueness of their statements about the 143M records which "may" have been affected, it seems likely that they weren't logging the relevant queries in any useful way, and that is definitely an architectural failure.
[ Parent | on HN ]
Re:Equifax Releases Details on Cybersecurity Incident, Annou... by closeparen on Friday September 15, 2017 @10:30PM (#15262489)
TFA says Equifax learned of the breach by detecting anomalous traffic. I'd say there was an alarm, but it didn't do anything to actually stop the attack.
[ Parent | on HN ]
Re:Equifax Releases Details on Cybersecurity Incident, Annou... by sova on Friday September 15, 2017 @10:29PM (#15262488)
75 days? The report by Equifacks makes it sound like a one day delay from attack to taking the machine offline. Sneaky language.
[ Parent | on HN ]