Live data from Hacker News

Equifax takes down web page after reports of new hack

reuters.com

1–10 of 143 posts

Re: Equifax takes down web page after reports of new hack

#3
post #2

Something's doesn't sound quite right over at Equifax, I would have thought that with the scale of the last breach a full and thorough audit of all existing systems would have been a major priority!

Why would you think that?

>Hack Will Lead to Little, if Any, Punishment for Equifax

https://www.nytimes.com/2017/09/20/business/equifax-hack-pen...

Re: Equifax takes down web page after reports of new hack

#4
post #2

Something's doesn't sound quite right over at Equifax, I would have thought that with the scale of the last breach a full and thorough audit of all existing systems would have been a major priority!

Just a normal, slow moving, bureaucratic corporation.

But even if they were faster, I'm sure an audit of all existing systems is not as simple as making sure all the doors and windows are locked around the house.

Re: Equifax takes down web page after reports of new hack

#7
post #2

Something's doesn't sound quite right over at Equifax, I would have thought that with the scale of the last breach a full and thorough audit of all existing systems would have been a major priority!

Just a normal, slow moving, bureaucratic corporation. But even if they were faster, I'm sure an audit of all existing systems is not as simple as making sure all the doors and windows are locked around the house.

You can hire a good group of independent pen testers or security companies, and let them hammer your public facing sites. They don't lack the necessary financial resources. At least they would have discovered that type of problems. It's not difficult when there's a will.

Re: Equifax takes down web page after reports of new hack

#8
post #6

The incompetence is mindblowing. Could this be a good argument for software engineers to get their professional license?

It seems abundantly clear that Equifax's incompetence is _systemic_. Under the presumption that they could have hired better engineers, I fully believe they would have managed them into submission.

Re: Equifax takes down web page after reports of new hack

#10
post #8
post #6

The incompetence is mindblowing. Could this be a good argument for software engineers to get their professional license?

It seems abundantly clear that Equifax's incompetence is _systemic_. Under the presumption that they could have hired better engineers, I fully believe they would have managed them into submission.

Or managed into finding another job, most likely.
Post reply on HN