Live data from Hacker News

Equifax doesn't want consumers to get their $125

nytimes.com

81–90 of 286 posts

Re: Equifax doesn't want consumers to get their $125

#81
post #6

If anyone is getting a mortgage or refinancing soon, ask your lender to 'drop' equifax without running your score with them - just take the score from the other two. Equifax is an unnecessary security and privacy risk. They are a horrible company that needs to go out of business. Make their customers feel embarrassed to be doing business with them.

Do we really know for sure that the other bureau's are really any better, and not just lucky at this point?

Re: Equifax doesn't want consumers to get their $125

#82
post #58
post #54

Earlier quoted context omitted.

HN definitely has a pitchfork mentality similar to other groups. It also leans politically left. It's not as bad as reddit yet but it is slowly getting that way (waiting for downvotes).

What does political leaning has to do with IT sec?

[deleted]

Re: Equifax doesn't want consumers to get their $125

#83
post #54

I don't understand it. Here is hn, where everyone knows that cybersecurity is 100% offence 0% defence. It is basically our job to secure systems and we all agree it is pretty much impossible, unless you airgap every computer in building and glue every USB port. Then, knowing that, we blame equifax for data breach. Equifax is fat target and it was matter of time data would be stolen.

HN definitely has a pitchfork mentality similar to other groups. It also leans politically left. It's not as bad as reddit yet but it is slowly getting that way (waiting for downvotes).

Maybe we should make a hard right and protect our servers with assault rifles instead.

Re: Equifax doesn't want consumers to get their $125

#84
post #41

Is Equifax actually liable or responsible for anything? No jail time or other penalties for executives. Okay so how are they held accountable?

They were incredibly negligent and nepotistic. Their head of security, Susan Mauldin, had zero security or computer skills - she was a music teacher. https://www.marketwatch.com/story/equifax-ceo-hired-a-music-...

She graduated with a degree in music, so what? How many of your technical co-workers and colleagues have degrees in non-STEM fields? Probably more than a few. How many of us with actual CS degrees learned about security? I have both a BS/MS in CS, from a top school, and I never once had a class on security. Don't think one was even offered.

The question is what was her experience prior to being promoted? I have not kept track of this "scandal" since it started, but someone's education should not be a major factor.

All that said, she was pretty bad at her job.

Re: Equifax doesn't want consumers to get their $125

#85
post #24
post #9

Earlier quoted context omitted.

Jail time for executives seems a little excessive for some employee merely failing to apply a security patch... On the other hand, this settlement shouldn't have been capped at such a ridiculously low amount.

That's just what they want you to think. Really they just sold the data off on the international market.

I am 1000000‰ sure it is both.

Re: Equifax doesn't want consumers to get their $125

#86
post #41

Is Equifax actually liable or responsible for anything? No jail time or other penalties for executives. Okay so how are they held accountable?

They were incredibly negligent and nepotistic. Their head of security, Susan Mauldin, had zero security or computer skills - she was a music teacher. https://www.marketwatch.com/story/equifax-ceo-hired-a-music-...

She had 15 years of experience in increasingly senior positions. You have no idea what additional training or certifications she achieved. And the early Bloomberg reporting that detailed the hack painted her in a very positive light, trying to do the right things under pressure from more senior "leadership" to cut costs and speed things up.

Re: Equifax doesn't want consumers to get their $125

#88
post #6

If anyone is getting a mortgage or refinancing soon, ask your lender to 'drop' equifax without running your score with them - just take the score from the other two. Equifax is an unnecessary security and privacy risk. They are a horrible company that needs to go out of business. Make their customers feel embarrassed to be doing business with them.

Do we really know for sure that the other bureau's are really any better, and not just lucky at this point?

It doesn't necessarily matter. If one of these companies is badly wounded by credibility problems... it can catalyze a wider change.

Re: Equifax doesn't want consumers to get their $125

#89
post #6

If anyone is getting a mortgage or refinancing soon, ask your lender to 'drop' equifax without running your score with them - just take the score from the other two. Equifax is an unnecessary security and privacy risk. They are a horrible company that needs to go out of business. Make their customers feel embarrassed to be doing business with them.

Do we really know for sure that the other bureau's are really any better, and not just lucky at this point?

I swear this is the motto of hacker news. "Everything sucks and you're wasting your time trying to change it" - HN

Re: Equifax doesn't want consumers to get their $125

#90

I don't understand it. Here is hn, where everyone knows that cybersecurity is 100% offence 0% defence. It is basically our job to secure systems and we all agree it is pretty much impossible, unless you airgap every computer in building and glue every USB port. Then, knowing that, we blame equifax for data breach. Equifax is fat target and it was matter of time data would be stolen.

[deleted]
Post reply on HN