Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Monday September 18 2017, @09:41AM   Printer-friendly
from the retired-or-fired dept.

Submitted via IRC for SoyCow5743

On Friday, Equifax announced that two top executives would be retiring in the aftermath of the company's massive security breach that affected 143 million Americans.

According to a press release, the company said that its Chief Information Officer, David Webb, and Chief Security Officer, Susan Mauldin, would be leaving the company immediately and were being replaced by internal staff. Mark Rohrwasser, who has lead Equifax's international IT operations, is the company's new interim CIO. Russ Ayres, who had been a vice president for IT at Equifax, has been named as the company's new interim CSO.

The notorious breach was accomplished by exploiting a Web application vulnerability that had been patched in early March 2017.

However, the company's Friday statement also noted for the first time that Equifax did not actually apply the patch to address the Apache Struts vulnerability (CVE-2017-5638) until after the breach was discovered on July 29, 2017.

Source: https://arstechnica.com/tech-policy/2017/09/equifax-cio-cso-retire-in-wake-of-huge-security-breach/

Also at https://www.bleepingcomputer.com/news/security/equifax-releases-new-information-about-security-breach-as-top-execs-step-down/


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by frojack on Monday September 18 2017, @11:01PM (7 children)

    by frojack (1554) on Monday September 18 2017, @11:01PM (#569965) Journal

    So what!?

    The Music major did everything right.

    It was the CS graduate admin tech with the degree and training that failed to follow the Music Major's orders and applied the patch to ALL the servers except THIS one. The guy with the appropriate training screwed the pooch.

    --
    No, you are mistaken. I've always had this sig.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by Whoever on Tuesday September 19 2017, @02:13AM (2 children)

    by Whoever (4524) on Tuesday September 19 2017, @02:13AM (#570018) Journal

    "The buck stops here"?

    Was the Chief Security Officer asking the right questions? Did she get the work audited? If your security relies upon individuals doing the right thing without appropriate auditing of their work, you will eventually fail.

    People make mistakes. As a manager, your job is to ensure that mistakes are corrected.

    Now, I am not saying that the music major makes her unqualified for that position, but the fact that Equifax was hacked suggests that she did not have the appropriate skills. Or it may be that she didn't have the appropriate budget.

    • (Score: 2) by frojack on Wednesday September 20 2017, @07:09PM (1 child)

      by frojack (1554) on Wednesday September 20 2017, @07:09PM (#570793) Journal

      Or maybe she couldn't get clearance from HR to give every employee a lie detector test at the end of every work day.

      Somewhere out there across north america there is a railroad spike that has worked its way loose. Maybe I loosened it on my last vacation because I have a mean streak.

      It my cause a derailment.
      Somebody lock up Warren Buffet right now, till we know every single spike is inspected and fixed.

      --
      No, you are mistaken. I've always had this sig.
      • (Score: 2) by Whoever on Wednesday September 20 2017, @10:04PM

        by Whoever (4524) on Wednesday September 20 2017, @10:04PM (#570870) Journal

        Somewhere out there across north america there is a railroad spike that has worked its way loose. Maybe I loosened it on my last vacation because I have a mean streak.

        It my cause a derailment.
        Somebody lock up Warren Buffet right now, till we know every single spike is inspected and fixed.

        If a single loose spike is likely to cause a major derailment with serious consequences for the railroad company, then, fuck yes, the railroad company should be inspecting them every night and someone high up (the most senior person in charge of safety) should take the blame in the event of a derailment caused by a loose spike.

        But that's not the case, is it? Your argument is based on a false premise. Try again.

        Your analogy is completely invalid. But I bet it made your tiny mind feel good because you think you made a point.

        You didn't. You just showed your stupidity again.

  • (Score: 2) by FatPhil on Tuesday September 19 2017, @04:13AM (3 children)

    by FatPhil (863) <pc-soylentNO@SPAMasdf.fi> on Tuesday September 19 2017, @04:13AM (#570058) Homepage
    If she was unable to evaluate whether her underlings were capable of doing their job properly, then she's a chocolate teapot.
    Whoever hired her for her position is equally useless. Simply noticing that she has claimed "data center" as a skill is not diligent recruiting. (What does she do - act as a rack?)
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
    • (Score: 1, Flamebait) by frojack on Wednesday September 20 2017, @07:11PM (2 children)

      by frojack (1554) on Wednesday September 20 2017, @07:11PM (#570797) Journal

      So your problem here seems to be that she is a she. You never mentioned the He who was also fired.

      perfunctory face-saving firing is perfunctory.

      --
      No, you are mistaken. I've always had this sig.
      • (Score: 2) by FatPhil on Wednesday September 20 2017, @09:22PM

        by FatPhil (863) <pc-soylentNO@SPAMasdf.fi> on Wednesday September 20 2017, @09:22PM (#570853) Homepage
        Wow, now you're really clutching at straws. At no point was anything I said predecated upon anyone's gender.

        I dare you do prove me wrong, and by so doing prove once and for all the widely held belief that deep down you're a bullshit artist (albeit only a grade C one).
        --
        Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
      • (Score: 2) by FatPhil on Wednesday September 20 2017, @09:27PM

        by FatPhil (863) <pc-soylentNO@SPAMasdf.fi> on Wednesday September 20 2017, @09:27PM (#570855) Homepage
        Oh, the he in the story is neither a superior nor a subordinate to the she in the story even if their responsibilities overlap, and therefore his case is independent of her case. He may well be just as unqualified for his role, that's independent of a discussion about her suitability.

        Do I bring up eth-fueled's traits when criticising your illogic? No, because you are different, and special, individuals.
        --
        Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves