Capital One Says Breach Hit 100M Individuals in U.S

Re:Capital One Says Breach Hit 100M Individuals in U.S by mc32 on Monday July 29, 2019 @11:09PM (#20561813)

If you put data in the cloud, make sure you encrypt with keys only you have even when they promise all sorts of assurances of oversight and process in addition to “we use AES”.

[ Parent | on HN ]

Re:Capital One Says Breach Hit 100M Individuals in U.S by giancarlostoro on Tuesday July 30, 2019 @03:09AM (#20562693)

This right here. Take away any outsiders ability to access things. I also feel AWS and the rest should be able to notify you when files untouched en masse for years are being accessed and it should set off alarms like crazy. If not acted upon then its the issue of whoever got those emails.

[ Parent | on HN ]

Re:Capital One Says Breach Hit 100M Individuals in U.S by flatiron on Tuesday July 30, 2019 @08:41AM (#20564255)

You can. It’s cloudwatch. Also at least put these things in glacier so you have some time between the download request and when they get the file to hopefully stop it.

[ Parent | on HN ]

Re:Capital One Says Breach Hit 100M Individuals in U.S by Graham24 on Tuesday July 30, 2019 @06:22AM (#20563486)

If you put data in the cloud...

assume it is no longer private.

[ Parent | on HN ]

Re:Capital One Says Breach Hit 100M Individuals in U.S by pravinva on Tuesday July 30, 2019 @06:32PM (#20569888)

As opposed to on your computer connected to the internet?

[ Parent | on HN ]