Equifax C.E.O. Richard Smith Retires After Huge Data Breach

Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by rhizome on Tuesday September 26, 2017 @02:00PM (#15341083)

The US doesn't have a data-protection law, but how can you say their recording of the information is in good faith if they allow unauthorized people to make spurious changes via their systems and security practices?

[ Parent | on HN ]

Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by g051051 on Tuesday September 26, 2017 @02:15PM (#15341222)

> allow unauthorized people to make spurious changes via their systems and security practices?

I don't follow. Who's the unauthorized party that's "allowed" to make spurious changes via their systems and security practices?

[ Parent | on HN ]

Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by rhizome on Wednesday September 27, 2017 @02:35PM (#15350872)

Those who use the holes in their infrastructure, did you see the story about a database being accessible with default credentials? There is some question of scope for that particular issue, but it bodes duplication in the company's practices elsewhere.

[ Parent | on HN ]

Re:Equifax C.E.O. Richard Smith Retires After Huge Data Breach by g051051 on Thursday September 28, 2017 @09:25PM (#15362086)

You mean the web site that didn't have any non-public data, and was actually not in active use for 3 years? I agree that was sloppy, but the site didn't have the level of security requirements that one of the main sites or their internal network had. Do you put a $100 lock on a $5 bike?

And how was this "allow[ing] unauthorized people to make spurious changes"? No data was changed in the breach.

[ Parent | on HN ]