News for hackers. Stuff that matters.

A comment on CircleCI says hackers stole encryption keys and customers’ source code. Parent comment

Re:CircleCI says hackers stole encryption keys and customers... by wrldos on Sunday January 15, 2023 @04:45AM (#34388154)
SOC Type 2 compliance only suggests they have a sit in audit once a year. Basically the produced a lot of paperwork and it doesn't mean that they evidenced stuff honestly to the auditors.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by debarshri on Sunday January 15, 2023 @04:59AM (#34388209)
Auditors audit for one year. They make sure all the processes and controls are hit and used as expected. I am wondering why the audit firm is not made accountable when these hacks happen.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by Sahbak on Sunday January 15, 2023 @09:26AM (#34389603)
Having gone through SOC2 at two different companies, anyone who takes these certificates seriously is a fool.
[ Parent | on HN ]
Re:CircleCI says hackers stole encryption keys and customers... by wrldos on Sunday January 15, 2023 @01:55PM (#34391941)
Indeed they are just ticking a box for your customers.
[ Parent | on HN ]