Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
New Legislation Builds on California Data Breach Law
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/28/2019 | 9:19:24 PM
Re: RIGHT - Pass a law, that will fix it
100% agree with your post. Also, enjoyed the disclaimer. :)
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/27/2019 | 2:08:53 PM
Re: RIGHT - Pass a law, that will fix it
This law was passed late last year. It does not go into effect until 2020 (absent an amendment delaying its effective date).

Companies have time -- big or small.

That said, someone earnestly trying their best is going to fare better than someone who just screwed up big time and doesn't seem to care.

 

(Disclaimer: This comment/post is provided for informational, educational and/or entertainment purposes only. Neither this nor other posts here constitute legal advice or the creation, implication or confirmation of an attorney-client relationship. For actual legal advice, personally consult with an attorney licensed to practice in your jurisdiction.)
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/27/2019 | 11:12:15 AM
Re: RIGHT - Pass a law, that will fix it
@Joe, definitely understandable. The upstarts are just starting to gain footing, if they are lucky enough. Not sure if there already is but for scenarios like an upstart would you think it wise to delay enforcement of those regulations as long as their is a valid corporate roadmap towards implementing them?

Or would you see it as, regardless of corporate titan or company upstart a company is a company and they all have to follow the same rules?
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
2/27/2019 | 11:07:44 AM
Re: Systemic Change
Apologies, I should have specified. When I stated encrypt your data it should be scoped encryption. It is folly to try to encrypt all data. Specifcally you should encrypt sensitive data. But to ensure that you scope is accurate it needs to be segmented. 

I 100% concur that encrypting all data is implausible.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/26/2019 | 10:37:23 PM
Re: RIGHT - Pass a law, that will fix it
@Ryan: Moreover, as my home-state governor Charlie Baker put it when keynoting ThingWorx a few years back, big mega-corporations secretly love regulations (to some extent) because they're the only ones that can afford to keep up with them -- while scrappy upstarts are driven out of business.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
2/26/2019 | 10:35:16 PM
Re: Systemic Change
It remains to be seen, though, if federal data-breach notification laws will come into play -- and preempt preexisting state laws on that front.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
2/26/2019 | 11:01:34 AM
Re: Systemic Change
A law that wholesale forbids any but the strictest security practices could undermine the Business Judgement Rule. That makes sense. That is why having the balance becomes more important. There business that may them secure and provide services, I say Google is one of them as long as you do not consider privacy a major issue.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
2/26/2019 | 10:58:40 AM
Re: Systemic Change
Moreover, as much as I like security, it can't be forgotten that security and accessibility are at constant odds with each other It actually makes sense when you consider CIA. Keeping the balance between confidentiality, integrity and availability what makes security.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
2/26/2019 | 10:56:38 AM
Re: Biometrics
I'd anticipate that biometric-data clause getting fought tooth and naiL Yes, it makes sense. As we are using it more and more (such as FaceID) there will be more regulations around it.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
2/26/2019 | 10:54:33 AM
Re: Systemic Change
"Oh, we are sorry we lost your data but we did tell you quicker then we use to" Yes, I hear you. That would be just not convincing and not helpful at all.
Page 1 / 2   >   >>


Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Cloud Security Startup Lightspin Emerges From Stealth
Kelly Sheridan, Staff Editor, Dark Reading,  11/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29367
PUBLISHED: 2020-11-27
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.
CVE-2020-26245
PUBLISHED: 2020-11-27
npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or sani...
CVE-2017-15682
PUBLISHED: 2020-11-27
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.
CVE-2017-15683
PUBLISHED: 2020-11-27
In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.
CVE-2017-15684
PUBLISHED: 2020-11-27
Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.