sorlon
Re:House Oversight Committee Report on Equifax Breach [pdf]
on Monday December 10, 2018 @07:32PM (#18652391)
The report doesn't appear to mention that you could just login to their web portal with an obvious password [1].
That was a different portal and a different breach.
Re:House Oversight Committee Report on Equifax Breach [pdf]
on Monday December 10, 2018 @07:29PM (#18652377)
Maybe the cert on the web server was updated, but the private key for the updated cert was never copied to the SSL Visibility Appliance?
Re:House Oversight Committee Report on Equifax Breach [pdf]
on Monday December 10, 2018 @07:28PM (#18652368)
Legacy systems are a red herring. It's just a way to shift blame to predecessors.