Submitted via IRC for SoyCow5743
On Friday, Equifax announced that two top executives would be retiring in the aftermath of the company's massive security breach that affected 143 million Americans.
According to a press release, the company said that its Chief Information Officer, David Webb, and Chief Security Officer, Susan Mauldin, would be leaving the company immediately and were being replaced by internal staff. Mark Rohrwasser, who has lead Equifax's international IT operations, is the company's new interim CIO. Russ Ayres, who had been a vice president for IT at Equifax, has been named as the company's new interim CSO.
The notorious breach was accomplished by exploiting a Web application vulnerability that had been patched in early March 2017.
However, the company's Friday statement also noted for the first time that Equifax did not actually apply the patch to address the Apache Struts vulnerability (CVE-2017-5638) until after the breach was discovered on July 29, 2017.
Source: https://arstechnica.com/tech-policy/2017/09/equifax-cio-cso-retire-in-wake-of-huge-security-breach/
(Score: 2) by frojack on Monday September 18 2017, @11:01PM (7 children)
So what!?
The Music major did everything right.
It was the CS graduate admin tech with the degree and training that failed to follow the Music Major's orders and applied the patch to ALL the servers except THIS one. The guy with the appropriate training screwed the pooch.
No, you are mistaken. I've always had this sig.
(Score: 2) by Whoever on Tuesday September 19 2017, @02:13AM (2 children)
"The buck stops here"?
Was the Chief Security Officer asking the right questions? Did she get the work audited? If your security relies upon individuals doing the right thing without appropriate auditing of their work, you will eventually fail.
People make mistakes. As a manager, your job is to ensure that mistakes are corrected.
Now, I am not saying that the music major makes her unqualified for that position, but the fact that Equifax was hacked suggests that she did not have the appropriate skills. Or it may be that she didn't have the appropriate budget.
(Score: 2) by frojack on Wednesday September 20 2017, @07:09PM (1 child)
Or maybe she couldn't get clearance from HR to give every employee a lie detector test at the end of every work day.
Somewhere out there across north america there is a railroad spike that has worked its way loose. Maybe I loosened it on my last vacation because I have a mean streak.
It my cause a derailment.
Somebody lock up Warren Buffet right now, till we know every single spike is inspected and fixed.
No, you are mistaken. I've always had this sig.
(Score: 2) by Whoever on Wednesday September 20 2017, @10:04PM
If a single loose spike is likely to cause a major derailment with serious consequences for the railroad company, then, fuck yes, the railroad company should be inspecting them every night and someone high up (the most senior person in charge of safety) should take the blame in the event of a derailment caused by a loose spike.
But that's not the case, is it? Your argument is based on a false premise. Try again.
Your analogy is completely invalid. But I bet it made your tiny mind feel good because you think you made a point.
You didn't. You just showed your stupidity again.
(Score: 2) by FatPhil on Tuesday September 19 2017, @04:13AM (3 children)
Whoever hired her for her position is equally useless. Simply noticing that she has claimed "data center" as a skill is not diligent recruiting. (What does she do - act as a rack?)
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 1, Flamebait) by frojack on Wednesday September 20 2017, @07:11PM (2 children)
So your problem here seems to be that she is a she. You never mentioned the He who was also fired.
perfunctory face-saving firing is perfunctory.
No, you are mistaken. I've always had this sig.
(Score: 2) by FatPhil on Wednesday September 20 2017, @09:22PM
I dare you do prove me wrong, and by so doing prove once and for all the widely held belief that deep down you're a bullshit artist (albeit only a grade C one).
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 2) by FatPhil on Wednesday September 20 2017, @09:27PM
Do I bring up eth-fueled's traits when criticising your illogic? No, because you are different, and special, individuals.
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves