>> Heh, yeah. Like "we were so lax in our security that thousands of people
>> are now fraud victims. But please don't let that stop you shopping here,
>> it's quite safe..."
>>
>> Er, right.
>
> "We learned something from the experience and have changed things because
> our goal is for our customers to feel safe shopping with us.  We screwed
> up and we're sorry, but we've addressed the issue now."

See, maybe I'm just too cynical. I rather suspect that they actually 
changed nothing at all, they just don't want to go bankrupt when all 
their customers run away...

Post a reply to this message

On Thu, 28 Oct 2010 16:45:42 +0100, Invisible wrote:

>>> Heh, yeah. Like "we were so lax in our security that thousands of
>>> people are now fraud victims. But please don't let that stop you
>>> shopping here, it's quite safe..."
>>>
>>> Er, right.
>>
>> "We learned something from the experience and have changed things
>> because our goal is for our customers to feel safe shopping with us. 
>> We screwed up and we're sorry, but we've addressed the issue now."
> 
> See, maybe I'm just too cynical. I rather suspect that they actually
> changed nothing at all, they just don't want to go bankrupt when all
> their customers run away...

You're not old enough to be that cynical. ;-)

Seriously, they may not have changed anything, but it's more likely that 
they did change something and aren't disclosing the specifics of what 
they changed so as to protect their customers.  That's probably what I'd 
do - never give the 'bad guys' any additional information they can use to 
game the system or steal from people.

Jim

Post a reply to this message

> You're not old enough to be that cynical. ;-)

O RLY?

> Seriously, they may not have changed anything, but it's more likely that
> they did change something and aren't disclosing the specifics of what
> they changed so as to protect their customers.  That's probably what I'd
> do - never give the 'bad guys' any additional information they can use to
> game the system or steal from people.

Well, from what I read, they got hacked because they had little to no 
security at all. (Specifically, somebody got access to their wireless 
network because it was WEP, and then the traffic on that network was 
completely unencrypted so they could just do whatever they wanted...)

While I imagine it's probably WPA and they probably put in a few 
firewalls and a little authentication, I sorely doubt that any company 
who failed to see what a spectacularly insecure system they'd built in 
the first place would know how to *properly* secure their systems.

Post a reply to this message

On Fri, 29 Oct 2010 09:53:16 +0100, Invisible wrote:

>> You're not old enough to be that cynical. ;-)
> 
> O RLY?

Really.  You're not even middle-aged. :-)

>> Seriously, they may not have changed anything, but it's more likely
>> that they did change something and aren't disclosing the specifics of
>> what they changed so as to protect their customers.  That's probably
>> what I'd do - never give the 'bad guys' any additional information they
>> can use to game the system or steal from people.
> 
> Well, from what I read, they got hacked because they had little to no
> security at all. (Specifically, somebody got access to their wireless
> network because it was WEP, and then the traffic on that network was
> completely unencrypted so they could just do whatever they wanted...)
> 
> While I imagine it's probably WPA and they probably put in a few
> firewalls and a little authentication, I sorely doubt that any company
> who failed to see what a spectacularly insecure system they'd built in
> the first place would know how to *properly* secure their systems.

Unless they hired a consultant.  You don't know they didn't, do you?

Jim

Post a reply to this message

> Unless they hired a consultant.  You don't know they didn't, do you?

In my [admittedly limited] experience, if you hire a consultant, they 
tell you that what you really need to do is commission a project to 
properly research exactly how many white surfaces your office space 
should have. After all, the security vulnerabilities of your computer 
system are really just the visible symptoms of incorrect feng shui.

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message

On Sat, 30 Oct 2010 19:52:51 +0100, Orchid XP v8 wrote:

>> Unless they hired a consultant.  You don't know they didn't, do you?
> 
> In my [admittedly limited] experience, if you hire a consultant, they
> tell you that what you really need to do is commission a project to
> properly research exactly how many white surfaces your office space
> should have. After all, the security vulnerabilities of your computer
> system are really just the visible symptoms of incorrect feng shui.

Not even close to my experience with computing consultants.  Far more 
often than not, they know if they don't bring something actually useful 
to the table, they don't get paid.  Consultants are people, too - they 
like to eat.

Jim

Post a reply to this message

On 30/10/2010 9:07 PM, Jim Henderson wrote:
> Consultants are people, too - they like to eat.

Some of the ones I know like to eat too much ;-)

-- 

Best Regards,
	Stephen

Post a reply to this message

On Sun, 31 Oct 2010 10:42:32 +0000, Stephen wrote:

> On 30/10/2010 9:07 PM, Jim Henderson wrote:
>> Consultants are people, too - they like to eat.
> 
> Some of the ones I know like to eat too much ;-)

That's certainly true. :-)

Jim

Post a reply to this message

On 31/10/2010 6:06 PM, Jim Henderson wrote:
> On Sun, 31 Oct 2010 10:42:32 +0000, Stephen wrote:
>
>> On 30/10/2010 9:07 PM, Jim Henderson wrote:
>>> Consultants are people, too - they like to eat.
>>
>> Some of the ones I know like to eat too much ;-)
>
> That's certainly true. :-)
>

I may be one of them. :-(
Living in hotels most of the year is not good for your health.



-- 

Best Regards,
	Stephen

Post a reply to this message

On Sun, 31 Oct 2010 18:17:21 +0000, Stephen wrote:

> On 31/10/2010 6:06 PM, Jim Henderson wrote:
>> On Sun, 31 Oct 2010 10:42:32 +0000, Stephen wrote:
>>
>>> On 30/10/2010 9:07 PM, Jim Henderson wrote:
>>>> Consultants are people, too - they like to eat.
>>>
>>> Some of the ones I know like to eat too much ;-)
>>
>> That's certainly true. :-)
>>
>>
> I may be one of them. :-(

If I were a consultant, I would be too.

> Living in hotels most of the year is not good for your health.

That's certainly true...

Jim

Post a reply to this message