Former Equifax CEO says breach boiled down to one person not doing their job

#1

Post by orange_county » Tue, Oct 03, 2017, 9:31 PM UTC

Former Equifax CEO says breach boiled down to one person not doing their job
techcrunch.com

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#2

Post by whipoodle » Tue, Oct 03, 2017, 9:37 PM UTC

And who built the company that let that slide? Who came up with the practices that led to such a failure? Et cetera.

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#3

Post by jepler » Tue, Oct 03, 2017, 9:38 PM UTC

Someone needs to read http://web.mit.edu/2.75/resources/random/How%20Complex%20Sys... and also probably just stop talking

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#4

Post by [deleted] » Tue, Oct 03, 2017, 9:42 PM UTC

[deleted]

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#5

Post by dudul » Tue, Oct 03, 2017, 9:52 PM UTC

Apparently the data was stored in plain text. Sorry, but if not applying a patch to your Web framework is enough to make it that vulnerable, there are other problems in your infrastructure, your architecture and your process.

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#6

Post by MBCook » Tue, Oct 03, 2017, 9:54 PM UTC

Good to know.

And what about the person who’s job was to make sure that one guy did his job?

And the guy who was in charge of that person?

And the department who’s job was makin sure nothing was insecure?

And the guy managing them?

Yep. All one guys fault. Poor guy, ruining the American credit monitoring system for the rest of us.

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#7

Post by justboxing » Tue, Oct 03, 2017, 10:23 PM UTC

This is how it always goes down.

- F*ck your customers over by gross negligence and sheer greed (or stupidity, or both)

- Get caught with your pants down

- Dump your stocks and cash out

- Apologize when customers and media express outrage

- Go to Congressional hearing and repeat the magic words "I do not recall" for every question

- Find 1 low-level scapegoat employee

- Fire that employee and declare that the company is now 'clean'

- Avoid any jail time for wrong doing by paying a fine

- Collect your 'Golden Parachute' = MILLIONS and slide into a new CEO Job.

- Rinse and repeat.

White collar crime pays. Big time.

And almost no-one ever goes to Jail -- unless they have the bad-fortune of being prosecuted by A.G. Preet Bharara (record of 79-0 conviction obtained), which is also not relevant since Trump fired him soon after taking the White House Office.

Related: Here's Preet Bharara's Amazing 79-0 Insider Trading Conviction Score Card - http://www.businessinsider.com/bharara-insider-trading-convi...

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#8

Post by ww520 » Tue, Oct 03, 2017, 10:30 PM UTC

Blame the IT peon. Yeah, right. Every single time.

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#9

Post by patmcc » Tue, Oct 03, 2017, 10:30 PM UTC

Absolutely true.

That person is the former Equifax CEO.

Re: Former Equifax CEO says breach boiled down to one person not doing their job

#10

Post by openasocket » Tue, Oct 03, 2017, 10:32 PM UTC

There's a mantra at my company that you can't assign blame for a problem to a particular person. If one person is capable of breaking your system, you have a bad system. The focus isn't on finding the one person or the one mistake that caused it, but fixing the process so one person or one mistake can't wreak that much havoc. I think it's a very good philosophy.