News for hackers. Stuff that matters.

A comment on First American Financial Corp. Leaked Hundreds of Millions of Insurance Records. Parent comment

Re:First American Financial Corp. Leaked Hundreds of Million... by PatrolX on Friday May 24, 2019 @05:48PM (#20005590)
I wonder if we should take mandatory breach reporting a step further too and require them to list all security vendor products and services that were in place at the time of the breach.

Should security solution vendors be held to account for failing to live up to the bold claims they make?

[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by dsr_ on Friday May 24, 2019 @06:29PM (#20005867)
Depends on how they sold it. Did they sell tools, or tools plus configuration services and consulting?
[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by PatrolX on Friday May 24, 2019 @06:37PM (#20005906)
It may not be workable, but when big businesses have invested millions in tools and services I can't help feeling there should be some vendor accountability.
[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by GordonS on Saturday May 25, 2019 @07:37AM (#20008427)
That would be unfair, as the efficacy of most products depends on how they are configured, monitored and maintained.

For example, if I install an application whitelisting system, but whitelist too much, pay no attention to logs and alerts, or never patch it, then that's not really the vendor's fault.

[ Parent | on HN ]