Slashdot Mirror
Equifax Has Been Sending Consumers To a Fake Phishing Site for Almost Two Weeks (gizmodo.com)
An anonymous reader shares a Gizmodo report (condensed for space): For nearly two weeks, the company's official Twitter account has been directing users to a fake lookalike website. After announcing the breach, Equifax directed its customers to equifaxsecurity2017.com, a website where they can enroll in identity theft protection services and find updates about how Equifax is handing the "cybersecurity incident." But the decision to create "equifaxsecurity2017" in the first place was monumentally stupid. The URL is long and it doesn't look very official -- that means it's going to be very easy to emulate. To illustrate how idiotic Equifax's decision was, developer Nick Sweeting created a fake website of his own: securityequifax2017.com. (He simply switched the words "security" and "equifax" around.) As if to demonstrate Sweeting's point, Equifax appears to have been itself duped by the fake URL. The company has directed users to Sweeting's fake site sporadically over the past two weeks. Gizmodo found eight tweets containing the fake URL dating back to September 9th.
Because it's incredible how stupid this whole thing has been.
How can anyone be this bad at their core business?
SFWeekly is calling for all Equifax employees to be executed.
In all seriousness, the Equifax credit freeze does not work very well, and their freeze needs to work over Experian and TransUnion (and Equifax should pay for it).
It's worth pointing out that it's pretty stupid to use a link obfuscator (aka short URL service) in this situation... which this "Tim" person from Equifax also did - he used a link shortener to direct people to the fake website!
(I'd argue link shorteners are evil in general, but that's a discussion for another day)
#DeleteChrome
The level of Equifax's ongoing idiocy is amazing. Almost impressive, even.
The fact that they can't even get the most basic security things right strongly suggests that their core business activities are likely to be run with the same amount of incompetence.
I find it ironic that some of you love and at times take side of the business that fuck you over... now you have a lifetime to defend them and also you social security number... ha ha ha...
In music.
They probably read "The Smartest Guys in the Room: The Amazing Rise and Scandalous Fall of Enron" and cashed out to lawyer up before it was too late.
So equifax.com sits in an IP block that is directly managed by Equifax itself. Whereas, equifaxsecurity2017.com is in a block owned by CloudFlare.
This leads me to believe that the hackers didn't just get the website and the database. They got the entire network and that Equifax up until today is unsure if their network is safe yet. Equifax's decision to host the new website in CloudFlare is to make sure that they don't give additional information to hackers who are ALREADY in.
The only reasonable solution here is to jail Nick Sweeting for fraud.
Hey Guys! You might remember my post earlier where I whined about my husband failing to perform in bed and would rarely get me turned on at all? At first I was like: WTF, where do all those adult film stars get their stamina? — we've tried everything you can think of, from Viagra to other libido pills, nothing seemed to work. Bullshit! — his dick remained limp and sex didn’t last for more than a couple of minutes.
After about 6 months I gave up. I decided it was in his age and part of his physical condition, and that there was nothing we could do about it. Also, I can’t say I wanted sex that bad myself, knowing that I wouldn't be satisfied, and he’d be upset. I felt my husband totally losing confidence in himself and it was frustrating.
but then again slashcode advertising sucks dead horse balls!
Clint Eastwood is not dead yet and neither is his dick! His last words will be "dying ain't much of a livin' boy" if there is any humor left in the world.
On topic, the whole equifax situation in a way is similar and is proving to be complete and utter Wall Street bullshit IMHO and is in itself just a stock option clickbait scam. Just watch what happens when equifax goes on sale. I am almost willing to bet that the board is secretly considering offers right now and that is why the execs cashed a swack of shares. It almost seems as if their IT stupidity is deliberate to bring the stock down to the point where a buyout becomes possible.
This message was not sent from an iPhone because Peter Sellers really was a deviated prevert without a dime for the call
You're all fired, for cause, effective immediately. Concordant with a for-cause firing, any and all severance benefits are rendered null and void. Surrender all company property, including cell phones and computers, to HR immediately. Please collect your personal effects; security will be instructed to escort you off company property no later than 18:00 EDT.
Editor, A1-AAA AmeriCaptions
But why would anyone want to buy out a company that might have a worse reputation than Hitler?
It seems like we're reaching a point where we should just take every employee in anyway involved with the decisions that equifax has made in the last 5 years, and put them in jail for something like criminal negligence
Kill all the execs, revoke the business license, burn down the building
Need drawn and quartered by their golden parachutes.
For the data
Make all shareholders personally responsible for their share of the fines and judgments. The bill comes out to $10B after liquidating all assets and you own 1% of outstanding shares? Your personal liability is $100M.
Go ahead and make it non-dischargeable in bankruptcy for extra lulz. Might make other companies take their externalities more seriously.
Equifax shit in the pool at the cool kid's birthday party this time.
majoring in playing the rusty trombone no doubt! Cant see any other way she would have gotten the job!
But the data may already be public? Soooo, that is kinda defeating the purpose.
Powering the World with Knowledge
Yea, they sure did! They just gave all the personal information for pretty much all the working class Americans.
Now that is a great motto for a company that actually adhered to their mission statement.
Customers would be in even more trouble if Equifax was sending them to a real phishing site.
Perhaps they were trying to do their customers a favor for once, redirecting them to a site that's likely to be fare more secure than their own.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
Remember half the people are kids.
150mil american adults = all american adults.
Not even close to all of their data was made public.
Just the most critical information that affects pretty much ALL working class individuals in the US. It does not take a rocket scientist to actually realize that if the information taken is the primary basis for any other information they may have, even though it was not taken, will devalue any of said information to the point of insignificance. Since the underlying base information has now been compromised any other data derived from it has now been made much less valuable almost to the point of worthless.
So, in hoping that the company survives this debacle, it would have to be looked as to whether they diversified their company to not rely solely on this base information. In other words, does their information include anything where their "product" (e.g. the consumers that were compromised) still holds any value
BTW, if you actually look at their corporate mission statement, one of the values they purported to achieve was Integrity. I'd definitely say, in this case, they failed big on that one.
in hoping that the company survives this debacle
Personally, I hope they go out of business. The level of incompetence they continue to demonstrate indicates to me that the situation is not redeemable.
BTW, if you actually look at their corporate mission statement, one of the values they purported to achieve was Integrity.
Corporate mission statements are almost always marketing BS. Does anyone really take them seriously?
Besides, this is Equifax. We've already known for a very long time that "integrity" isn't exactly their #1 priority.