Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Equifax used records it collects from companies to fire employees with 2nd jobs

businessinsider.com

Post reply on HN
Print view View original

311–320 of 408 posts

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#311

Post by thwayunion »

prvit wrote: post #271
raydiatian wrote: post #135

Earlier quoted context omitted.

Holy fuck, I never knew this detail.

It's a nasty sexist lie. The person had no relevant degree (as is the case for most people working in security roles, because such degrees didn't exist until very recently). The person did have a literal decades of relevant experience, working in security.

> They're making fun of the fact that during the data breach the CISO was someone with a music degree and no background in security.

> It's a nasty sexist lie.

LMAO It is literally true.

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#312

Post by pb7 »

prvit wrote: post #286
cimi_ wrote: post #284

Earlier quoted context omitted.

I first thought you're right and the joke is not ok - but it's not a joke: https://archive.ph/Afnyl How is it sexism if it's true? Or should people not bring this up because she's a woman? I think the problem is Equifax's record of handling (non-consenting) user's data, and that causes resentment - not that the CISO was a woman.

>How is it sexism if it's true? Or should people not bring this up because she's a woman? Nobody would ever bring this up about a man, most CISOs have similar degrees. You haven't even been able to get a formal education on this topic for very long.

They certainly would if a company led by this man lost the records of 150M people that did not consent to their data being collected.

She was incompetent and should be in jail.

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#313

Post by prvit »

thwayunion wrote: post #311
prvit wrote: post #271

Earlier quoted context omitted.

It's a nasty sexist lie. The person had no relevant degree (as is the case for most people working in security roles, because such degrees didn't exist until very recently). The person did have a literal decades of relevant experience, working in security.

> They're making fun of the fact that during the data breach the CISO was someone with a music degree and no background in security. > It's a nasty sexist lie. LMAO It is literally true.

But it's literally not true. The person had decades of experience working security roles.

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#314

Post by prvit »

thwayunion wrote: post #309
prvit wrote: post #302

Earlier quoted context omitted.

Okay, name one person. I'm sure it's easy to find lots of qualified people with compsci degrees, but that's not a relevant degree .

> Okay, name one person. My current employer's CISO or my former employer's equivalent of the CISO. Both were hired prior to 2017 and had relevant education and expertise. And no, I'm not going to risk doxing myself to someone accusing me of sexism for saying that CTO/CISO roles should be filled by people with relevant education. > Compsci is not an infosec-related degree. Are you kidding me? I am beginning to lose c…

No post body was provided.

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#315

Post by thwayunion »

denkmoon wrote: post #92
thwayunion wrote: post #57

Earlier quoted context omitted.

Indeed. In an alternate universe, the Chief Information Security Officer of Equifax is giving interviews about the dangers of work from home for cyber security roles, informed by her masters in music composition and 0.0 years of IC experience as deep expertise. I'm still astounded no one ended up in jail over that. Software Engineering really does need some professionalization.

>Software Engineering really does need some professionalization. Consequences is what it needs. We can no longer allow it to be profitable to be so brazenly irresponsible. External selection pressure to kill off the maladaptive traits.

That's an excellent point. MBAs-as-CISOs may be more of a symptom of the incentive structure than a cause.

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#316

Post by mr_gibbins »

sirsinsalot wrote: post #45
justinc8687 wrote: post #31

"Equifax flagged 283 contractors for potential 'dual employment,' documents show." Would this not be a big flag to reclassify these contractors as employees? Being able to have multiple clients is one of the factors to determine if you're a contractor...

In the UK there's a set of criteria (IR35) that attempt to codify the distinction. The hiring business has to make the assessment. One of criteria is right to subcontract and freedom to work with multiple clients. If they get it wrong, they're liable for taxes, not the Contractor. HMRC, the UK tax body is responsible for this, and therefore it is an utter mess in practice and has had chilling effects on the UK IT con…

Luckily, this mess is due to be repealed, it was one of the lesser-known Trussonomic decisions made in the last few weeks.

Assuming, of course, that Truss does not repeal the repeal. It's not like she is known for doing screeching U-turns...

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#317

Post by prvit »

pb7 wrote: post #312
prvit wrote: post #286

Earlier quoted context omitted.

>How is it sexism if it's true? Or should people not bring this up because she's a woman? Nobody would ever bring this up about a man, most CISOs have similar degrees. You haven't even been able to get a formal education on this topic for very long.

They certainly would if a company led by this man lost the records of 150M people that did not consent to their data being collected. She was incompetent and should be in jail.

>They certainly would if a company led by this man lost the records of 150M people that did not consent to their data being collected.

I haven't heard anyone saying that about Metas CISO, or Twitters CISO, or Ubers CISO.

For example, the data leaked from Uber in the recent breach is way more impactful than anything which ever leaked from Equifax.

But hey, maybe that's just because nobody noticed that Latha Maripuri is also a woman.

>She was incompetent and should be in jail.

How would you know it wasn't her superiors constantly blocking her from doing her job properly?

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#318

Post by thwayunion »

prvit wrote: post #313
thwayunion wrote: post #311

Earlier quoted context omitted.

> They're making fun of the fact that during the data breach the CISO was someone with a music degree and no background in security. > It's a nasty sexist lie. LMAO It is literally true.

But it's literally not true. The person had decades of experience working security roles.

It is literally true that she had no relevant formal training.

It is also true AFAIK that when she got her first role as an executive in charge of security, she had no formal training or IC experience in security. All of her "security" experience was in executive roles. Which is insane. That never happens with other types of technical leadership roles (legal, law, finance, accounting, engineering, etc.).

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#319

Post by prvit »

thwayunion wrote: post #318
prvit wrote: post #313

Earlier quoted context omitted.

But it's literally not true. The person had decades of experience working security roles.

It is literally true that she had no relevant formal training. It is also true AFAIK that when she got her first role as an executive in charge of security, she had no formal training or IC experience in security. All of her "security" experience was in executive roles. Which is insane. That never happens with other types of technical leadership roles (legal, law, finance, accounting, engineering, etc.).

>It is literally true that she had no relevant formal training.

Yes, but that's also true of almost all BigCo CISOs.

>It is also true AFAIK that when she got her first role as an executive in charge of security

By "AFAIK" you mean that this is just what you assume without checking, right?

Re: Equifax used records it collects from companies to fire employees with 2nd jobs

#320

Post by metadat »

Bost wrote: post #193
can16358p wrote: post #190

I think there should be a law preventing companies from restricting their employees from having second jobs. As long as it doesn't affect their performance in their primary job and as they are not working at a direct competitor, it should be none of their stupid business (and should be illegal) to check for an employee's other jobs.

> "teammates" were fired for having "a second full-time job while maintaining their full-time role at EFX," Except that having a second FULL-TIME job does affect the first one.

What about being a parent? From what I hear it's like having a second job or even more work than that.
Post reply on HN