Citibank confirms hacking attack • Hacker News Board

Re: Citibank confirms hacking attack

#21

Post by jdp23 » Thu, Jun 09, 2011, 2:20 PM UTC

mrcharles wrote: post #19

I wonder when corporations will start taking true computer security seriously? Because it seems to me that companies just aren't. Toyota, Sony, Citibank, that construction company who allowed their computers to be compromised and thus have hundreds of thousands of dollars stolen. It's a good time to be a hacker in the classic unlawful sense. Because of that, these events are only going to get worse and more frequent.

Corporations won't start taking computer security more seriously until they start facing serious business or legal consequences from being hacked.

Re: Citibank confirms hacking attack

#22

Post by pasbesoin » Thu, Jun 09, 2011, 3:03 PM UTC

jdp23 wrote: post #21

mrcharles wrote: post #19

I wonder when corporations will start taking true computer security seriously? Because it seems to me that companies just aren't. Toyota, Sony, Citibank, that construction company who allowed their computers to be compromised and thus have hundreds of thousands of dollars stolen. It's a good time to be a hacker in the classic unlawful sense. Because of that, these events are only going to get worse and more frequent.

Corporations won't start taking computer security more seriously until they start facing serious business or legal consequences from being hacked.

My reaction is similar. Specifically, I recall reading a few years ago some stories/comments about differences between banking in the U.S. versus Europe. For example, IIRC, one reason Europe had... I believe it's called "chip and PIN" on banking cards, was/is that banks are financial liable for losses.

Occasionally, a good article will appear that discusses "risk". I've come to assign great relevance to the term; many circumstances and changes "make sense" when you look at where risk is or is being shifted.

Re: Citibank confirms hacking attack

#23

Post by ipince » Thu, Jun 09, 2011, 3:18 PM UTC

mrcharles wrote: post #19

I wonder when corporations will start taking true computer security seriously? Because it seems to me that companies just aren't. Toyota, Sony, Citibank, that construction company who allowed their computers to be compromised and thus have hundreds of thousands of dollars stolen. It's a good time to be a hacker in the classic unlawful sense. Because of that, these events are only going to get worse and more frequent.

It's also a good time to be a security expert then.

Re: Citibank confirms hacking attack

#24

Post by sectek » Thu, Jun 09, 2011, 3:30 PM UTC

chime wrote: post #20

I apologize for not talking about the main topic here but I have to say what an obnoxious website! I can't read the article because it says: Premium Content Area Please complete a survey to unlock this page. Download F1 Racing Challenege Today! How Would You Look As A Redneck? How Would You Look As A Zombie? Download 1600 Games! Full Versions! Want To See Yourself As An Elf? How Would You Look As A Vampire? When I tr…

Your post reminded me to turn off ad-block and no-script on HN. Thanks! I didn't see any of that stuff on that site with these on by default.

Re: Citibank confirms hacking attack

#25

Post by pg » Thu, Jun 09, 2011, 4:35 PM UTC

chime wrote: post #20

I apologize for not talking about the main topic here but I have to say what an obnoxious website! I can't read the article because it says: Premium Content Area Please complete a survey to unlock this page. Download F1 Racing Challenege Today! How Would You Look As A Redneck? How Would You Look As A Zombie? Download 1600 Games! Full Versions! Want To See Yourself As An Elf? How Would You Look As A Vampire? When I tr…

BTW this comment refers to the bogus site this originally linked to.

Re: Citibank confirms hacking attack

#26

Post by corin_ » Thu, Jun 09, 2011, 5:01 PM UTC

pg wrote: post #25

chime wrote: post #20

I apologize for not talking about the main topic here but I have to say what an obnoxious website! I can't read the article because it says: Premium Content Area Please complete a survey to unlock this page. Download F1 Racing Challenege Today! How Would You Look As A Redneck? How Would You Look As A Zombie? Download 1600 Games! Full Versions! Want To See Yourself As An Elf? How Would You Look As A Vampire? When I tr…

BTW this comment refers to the bogus site this originally linked to.

I thought I was going mad for a second until I moved on to your comment.

Re: Citibank confirms hacking attack

#27

Post by corin_ » Thu, Jun 09, 2011, 5:04 PM UTC

smackfu wrote: post #8

Wickk wrote: post #2

>It has been criticised for not telling customers about the breach when it happened in May. Really now? This needs to stop, it wasn't ok a decade ago, it wasn't ok when Sony pulled this recently, why would they think it's ok now?

The tense is weird in that sentence you quoted. If this information came out today, when were they criticized?

Time isn't binary, the fact that something happened "today" doesn't mean that no time has passed between when it happened and now.

Re: Citibank confirms hacking attack

#28

Post by srimadman » Thu, Jun 09, 2011, 6:56 PM UTC

hey the link is changed

Re: Citibank confirms hacking attack

#29

Post by jcromartie » Thu, Jun 09, 2011, 7:56 PM UTC

jdp23 wrote: post #21

mrcharles wrote: post #19

I wonder when corporations will start taking true computer security seriously? Because it seems to me that companies just aren't. Toyota, Sony, Citibank, that construction company who allowed their computers to be compromised and thus have hundreds of thousands of dollars stolen. It's a good time to be a hacker in the classic unlawful sense. Because of that, these events are only going to get worse and more frequent.

Corporations won't start taking computer security more seriously until they start facing serious business or legal consequences from being hacked.

There's a perception problem: "being hacked" means you are a victim, and the question of negligence rarely comes into play. There should be more stigma associated with it, so that someone who has a serious security problem is seen as the lax/irresponsible party to a breach that they really are.

Re: Citibank confirms hacking attack

#30

Post by yalogin » Thu, Jun 09, 2011, 8:03 PM UTC

Security became a hot topic about 10 years ago and thought it will be become a mandatory/important class in degree courses just like programming or OS is there by increasing the knowledge/awareness among every techie. I realized a few years later how naive that was.