In their defense, it's so awful that some hackers at least might not even try it.
Also: "1..2..3..4..5 That's the kind of password an idiot puts on their luggage!" --Spaceballs
Equifax securities fraud class action [pdf]
161–170 of 227 posts
Re: Equifax securities fraud class action [pdf]
#162> On August 2, 2017, Equifax notified the FBI of the Data Breach. It also retained legal counsel to guide its investigation into the breach. The same day, Equifax’s legal counsel retained Mandiant to assist in the investigation into the incident. Experts would later note that these steps suggested that Equifax knew that the Data Breach was serious. In the days immediately following the discovery of the Data Breach, G…
It's sad how obvious this is. Possibly even more obvious than the insider trading at intel prior to the spectre/meltdown public release. This will be forever the legacy of Eric Holder, the man who changed the justice department policy to go after smaller 'fines' as settlements instead of prosecuting crimes.. only because of the simple fact that fines are easy to win, and criminal cases can be lost. Justice is now esc…
Not just too difficult, but reinforcing the idea that with enough money, you can buy your way out of trouble.
Re: Equifax securities fraud class action [pdf]
#163> On August 2, 2017, Equifax notified the FBI of the Data Breach. It also retained legal counsel to guide its investigation into the breach. The same day, Equifax’s legal counsel retained Mandiant to assist in the investigation into the incident. Experts would later note that these steps suggested that Equifax knew that the Data Breach was serious. In the days immediately following the discovery of the Data Breach, G…
It's sad how obvious this is. Possibly even more obvious than the insider trading at intel prior to the spectre/meltdown public release. This will be forever the legacy of Eric Holder, the man who changed the justice department policy to go after smaller 'fines' as settlements instead of prosecuting crimes.. only because of the simple fact that fines are easy to win, and criminal cases can be lost. Justice is now esc…
I'd like to defend Eric Holder. It's no secret what he does or who he works for. He's a lawyer that works for the big banks and other powerful industries, his job is literally to keep them out of legal trouble.
We should be pointing the finger at the people who knew all these things and still put him in charge of the justice department. We should also be pointing the finger at the ones who have the power to change these policies now, but fail to do so.
At this point Holder is just a scapegoat.
Re: Equifax securities fraud class action [pdf]
#164I really appreciate reading this directly from the source, thank you
Re: Equifax securities fraud class action [pdf]
#165> On August 2, 2017, Equifax notified the FBI of the Data Breach. It also retained legal counsel to guide its investigation into the breach. The same day, Equifax’s legal counsel retained Mandiant to assist in the investigation into the incident. Experts would later note that these steps suggested that Equifax knew that the Data Breach was serious. In the days immediately following the discovery of the Data Breach, G…
It's sad how obvious this is. Possibly even more obvious than the insider trading at intel prior to the spectre/meltdown public release. This will be forever the legacy of Eric Holder, the man who changed the justice department policy to go after smaller 'fines' as settlements instead of prosecuting crimes.. only because of the simple fact that fines are easy to win, and criminal cases can be lost. Justice is now esc…
"too big to prosecute"??
Re: Equifax securities fraud class action [pdf]
#166I really appreciate reading this stuff directly from the source, thanks for posting this!
Re: Equifax securities fraud class action [pdf]
#167I'm using that headline as our thought of the day in group chat at work. Because that is just egregious and negligent. Nobody thought to raise that? to anyone? Although I can understand. I have several people who now call themselves DevOps on a project who have practically zero experience with systems operations _or_ development, and have done some utterly incomprehensibly stupid things. It doesn't matter how fancy y…
>Nobody thought to raise that? to anyone?
Unbelievable, no?
And yet, when things like this happen, people want to blame the CEO. Sure, the buck stops there and that person is really responsible for everything. But should the executives really be concerning themselves with the database password? It's an utterly irresponsible thing, and those actually working on the product should have known better.
Unpopular opinion around here, I know....
Re: Equifax securities fraud class action [pdf]
#168I'm using that headline as our thought of the day in group chat at work. Because that is just egregious and negligent. Nobody thought to raise that? to anyone? Although I can understand. I have several people who now call themselves DevOps on a project who have practically zero experience with systems operations _or_ development, and have done some utterly incomprehensibly stupid things. It doesn't matter how fancy y…
This can happen for many reasons. People just want to get whatever it is working. There is probably a lot of time delivery pressure and something like IAM is complicated. IMO, the first step to fixing the problem is give DevOps the proper amount of time to design the required permissions. It sounds easy from the outside, but again IAM can be very complex. Additionally, DevOps must think security first. That means a n…
>People just want to get whatever it is working. There is probably a lot of time delivery pressure and something like IAM is complicated.
Inexcusable. Change the login/password to anything more secure, even if it's temporary.
Re: Equifax securities fraud class action [pdf]
#169Earlier quoted context omitted.
"pre-arranged" != "Rue 10b5-1 trading plan" I'm not an expert in stock trading, but this logic seems very plausible. A Plan does not preclude other arrangements to sell shares
I am admittedly not the most educated person in this area (I wasn't 100% sure that "rule 10b5-1" was the rule that applied here), so I'd like to learn more. Can you give me an example of a reason you'd pre-arrange the sale of stock but not do it in accordance with Rule 10b5-1?
Arranging some other transaction (e.g. buying a yacht) in advance that would require cash, so the executive plans in advance a single sale to execute just ahead of the need for cash. If we go with the yacht purchase, perhaps in six months the builder needs final payment, so Mr. Executive arranges for a single sale of company stock a couple weeks before that date.
Maybe such a thing does indeed require amending The Plan, but I haven't seen anyone with expertise chime in. I'm just saying that logically, "pre-arranged" does not necessitate "working within Rule 10b5-1"
Re: Equifax securities fraud class action [pdf]
#170"That's the kind of password and idiot would have on their luggage!" (with apologies to Spaceballs)