News for hackers. Stuff that matters.

A comment on First American Financial Corp. Leaked Hundreds of Millions of Insurance Records. Parent comment

Re:First American Financial Corp. Leaked Hundreds of Million... by throwawaymath on Friday May 24, 2019 @08:25PM (#20006372)
I agree with you. Let me emphasize this explicitly: the real failure here is the utter lack of authn and authz. But it is meaningful that the integer IDs are being used.
[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by edoceo on Friday May 24, 2019 @08:45PM (#20006443)
One reason I <3 HN is that complex scenarios like this get described so clearly, succinctly like this.

I couldn't say it better myself when I'm speaking to management that makes these kinds of decisions. Now I can quote throwawaymath verbatim to drive the detailed point home.

Thanks!

[ Parent | on HN ]
Re:First American Financial Corp. Leaked Hundreds of Million... by PatrolX on Friday May 24, 2019 @09:03PM (#20006509)
> I agree with you. Let me emphasize this explicitly: the real failure here is the utter lack of authn and authz.

Bingo.

[ Parent | on HN ]