Re:Security Firm Bit9 Hacked, Used to Spread Malware
by jackalope on Tuesday February 12, 2013 @08:22AM
(#5206587)
While it's possible that their product might have protected them, that angle is merely self-promotional spin. The real reason that this happened is because Bit9 didn't properly secure their assets in the first place. It shouldn't matter if "a malicious third party was able to illegally gain temporary access." A perimeter defense can be a useful deterrent, but you should still keep your jewels in a safe.
[ Parent
| on HN ]
Re:Security Firm Bit9 Hacked, Used to Spread Malware
by jessaustin on Tuesday February 12, 2013 @10:22AM
(#5207314)
Like an HSM? I would have expected that any security company would be using those to store private keys, in which case "we should have used our own software" doesn't make much sense.
Re:Security Firm Bit9 Hacked, Used to Spread Malware
by darkspaten on Tuesday February 12, 2013 @12:52PM
(#5208271)
Reminds me of the RSA response to their extreme compromise. Even quite some time after the incident the EVP & Chairman, Art Coviello, only would state how close "on the tail" they were to the perpetrator(s) thanks to their technology & skill. They're still a viable security organization, so apparently the market was easily able to disregard the core issues.