Re:US court system suffered 'incredibly significant attack' ...
by m3047 on Saturday July 30, 2022 @03:42PM
(#32289656)
True story...
These people (https://www.nisc.coop/) make (and operate) software which is used by lots of infrastructury / governmenty organizations. (I leave the osint to you.)
My cable company leases fiber from the city. The city built out the fiber because SCADA; they used to run the cable company.
The city utility department uses SSNs as a PIN for customer accounts. Wouldn't let me change it. I eventually complained to the State Attorney General. Then they relented and let me set a PIN.
It's not that they have good practices around any of this. The "app" they use to verify your PIN *shows them the PIN* or SSN. They justify this because their employees pass background checks.
I'm sorry, I imagine that seems like a digression. So, back to the cable company.
The cable company uses a version of NISC's software which *stores passwords in a retrievable format* and displays them for their customer service personnel. They justify this because their employees pass background checks.
These people (https://www.nisc.coop/) make (and operate) software which is used by lots of infrastructury / governmenty organizations. (I leave the osint to you.)
My cable company leases fiber from the city. The city built out the fiber because SCADA; they used to run the cable company.
The city utility department uses SSNs as a PIN for customer accounts. Wouldn't let me change it. I eventually complained to the State Attorney General. Then they relented and let me set a PIN.
It's not that they have good practices around any of this. The "app" they use to verify your PIN *shows them the PIN* or SSN. They justify this because their employees pass background checks.
I'm sorry, I imagine that seems like a digression. So, back to the cable company.
The cable company uses a version of NISC's software which *stores passwords in a retrievable format* and displays them for their customer service personnel. They justify this because their employees pass background checks.
Welcome to 2022.