News
Commentary
NewsNewsNewsNewsNewsNewsNews
NewsNewsNews
CommentaryNewsNews
CommentaryNews
CommentaryNewsNews
This is a great post Matt. Does anyone have a problem with the way companies were notified? Certain companies were told early, certain companies weren't, and there are vendors that still don't know if their product are vulnerable....
In reply to: Heartbleed
I will update the passwords now and couple days or weeks later again to make sure I am safe. Luckily I use Sticky Password which helps me with managing the hassle.
In reply to: When to update the passwords
@JamesR010: I am well aware of the compliance vs secure scenario, as well as the Heartland situation. I also have seen firsthand how kiosks, ATMs, etc. run imbedded XP in admin mode. I have seen horrible security...
In reply to: Re: It's Windows, Stupid!
@GonzSTL : They were "certified" by Trustwave, and being "in compliance" does NOT equal being secure. Trustwave doesn't have a good track record of certifying compliance (see Heartland Payment Systems fiasco of a few years...
In reply to: Re: It's Windows, Stupid!
Blame the victim? When banks get robbed, do we blame their security? This would only happen if there was gross negligence such as leaving cash out unsupervised. I know firsthand that the hacking groups breaching larger...
In reply to: Target was a victim
We don't actually know if Target's POS systems were not updated or had malware protection. We do know that they were PCI sertified immediately prior to the breach, so I'd like to think that their ASV or whomever certified...
In reply to: Re: It's Windows, Stupid!
Agreed. Most of these PoS systems (PoS - lol) run WinXP in admin mode, are not patched properly, and may not even have AV locally. However, most of the fault is still on Target's C executives for dropping the ball on sec...
In reply to: Re: It's Windows, Stupid!
I think the problem would be prevelant in any mainstream operating system used globally for companies and most households. If MAC OSX was the number 1 used operating system at companies and in homes, then we would be saying...
In reply to: Re: It's Windows, Stupid!
While Target and many others performed only 95% of their due diligence, that still doesn't exonerate them or anyone else that's still vulnerable. Automated event detection, correlation and the elimination of irrelevant...
In reply to: Being wrong with other company doesn't exonerate anyone
Tweet This
8 Comments
