News for hackers. Stuff that matters.

A comment on Equifax C.E.O. Richard Smith Retires After Huge Data Breach. Parent comment

Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by spathi_fwiffo on Tuesday September 26, 2017 @01:30PM (#15340795)
He already made his point: "Struts had provided a remedy for the fault, months prior."

According to your quote, they patched only after they were the victims of a breach; they should have been pro-active and dealt with the issue as soon as the vulnerability was made public.

[ Parent | on HN ]
Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by g051051 on Tuesday September 26, 2017 @01:40PM (#15340898)
You're assuming that they took no action, as opposed to not being 100% effective in their detection and coverage. There's no evidence that they simply ignored it. If they're using Struts, all they had to do is miss one instance of the wrong jar somewhere in their software ecosystem.
[ Parent | on HN ]