US travel firm $4.5M ransom negotiation open chat

Re:US travel firm $4.5M ransom negotiation open chat by foobiekr on Sunday August 02, 2020 @10:10PM (#24033537)

The people releasing terrible software (that has a default-open admin port with no login credentials and no filtering, as just one of many examples) are not usually the ones who end up paying the ransoms.

[ Parent | on HN ]

Re:US travel firm $4.5M ransom negotiation open chat by hellotomyrars on Monday August 03, 2020 @12:04AM (#24034117)

I'd argue on the scale of a company like in this example and other high-profile example that if you're integrating software with such glaring holes in your network then you're the one who is culpable.

Obviously if there are unknown vulnerabilities that is one thing, but there is a level of due diligence you should practice as the operator.

[ Parent | on HN ]

Re:US travel firm $4.5M ransom negotiation open chat by foobiekr on Monday August 03, 2020 @10:28AM (#24038161)

I agree that they are culpable, but that doesn’t close the loop.

[ Parent | on HN ]