One more trendy company that didn't have a security program gets compromised. It's almost as if ignoring the problem doesn't make it go away.
Pentest, code review, remediate, and test some more. Or, you know, lose brand value...that's the other option.
Suggesting that because the university has fostered a large number of financially successful commercial ventures, that it could be toxic to the education of innovators is completely lame. In fact, it is so lame that I wonder if the topic was entirely made up for lack of content. Technological innovation can do 3 things that matter:
1. Advance society, making us all better in some way.
2. Foster financial stability for large numbers of people.
3. Raise questions about either number one or number two.
Without financially successful technological innovation, we'd be Cuba in the 50's. Really happy, not that prosperous, and ready for a big change that would fuck us all.
This breach is due to the transition from the capable staff at SOE to the new security retards at SNEI. In fact, Shannon Lietz and her entire group should be fired. It has nothing to do with the industries inability to adapt. If that were true, then massive platforms at companies like and google would fail regularly, but they don't. The server architectures and application deployments are practically the same. Bottom line - Sony is an exception, and they are an exceptional fuck up.
has college graduation been the equivalent of "training" ? I don't know a single doctor who, even after acquiring their MD would suggest that they are "trained" in a given specialty.
Funny... our government and military installations have arguably the longest history of being extremely bad at information security. We also have the nasty habit of leaking information. Screenshots to follow within 12 months guaranteed.
Oh yes, lets do that immediately. I can't think of anyone i'd like to have my fingerprint more than Visa and its 500 service providers.
The credit card companies barely care about the issue at all actually. This is why they force the onus onto all the acquiring banks and SPs, and the acquiring banks force it onto the merchants.
There has been a zero sum when it comes to investigation of a method for wholesale change to the way credit and debit are processed mostly because the view of the stakeholders is that its not truly broken.
All the money spent on PCI-DSS and subsequent offshoots like PA-DSS is a waste. What the brands and the SSC should have chartered was a bunch of MIT math people to figure out how to practically take large amounts of data and redistribute it in a format that isn't completely retarded.
I had my wife's drivers license in my wallet because she forgot her purse when we were out and I accidentally handed it to TSA.. who subsequently waved me through...
Either way... i'm not too worried about anyone in that particular government agency becoming adept anytime soon, so maybe they have to rely on things like people who adamantly refuse to give out their ID. Its like a high profile game of spot the retard.
Could be it doesn't matter for a lot of applications. Houses aren't fireproof, in fact a lot of things arent: clothes, boxes, guitars, plastic, ...Michael Jackson...
I guess i'm naive to believe that an administration which has consistently fear mongered its way into passing ridiculous legislation needs to be replaced by one which, at least appears to be diametrically opposed to everything thats been broken already.
Oh well...
the response from the republican party that reads something like:
"Supporting article II doesn't necessarily infer that we're willing to arbitrarily wire tap Joe Citizen.."
and then of course, 3 more months go by, and everyone who is not considered a privacy advocate or a nutjob completely forgets about that they made this statement, the hundreds of others like it from this administration, and the blatant Orwellian nature of the country that we're living in.
Nothing is going to get resolved without a legislative body, preferably congress, stepping in and saying "no, article II does not mean that, and by the way we're burning the patriot act."
Dear Democrats, please win.
Thanks,
-a guy who likes to talk about guns on the phone, but poses zero threat to national security.
This is another perfect example of the federal government not enforcing HIPAA whatsoever. Its a great standard. Like PCI, easy to read, very prescriptive, and leaves little room for interpretation. Unfortunately, because of the way it was put into effect, it will likely never be enforced.
The only fallback that people have legally is that California privacy bill that's mentioned in section 12 of PCI.
I think the biggest takeaway I had was that the rest of my life is more important than what I do 8-5. Try to enjoy all the other things that life offers at least at the same level of effort you put into your job.
You have what I like to call Baskin Robbins Syndrome. It's where you really really dig ice cream - UNTIL you get a job where you can eat a bunch of free ice cream. You now loathe ice cream.
Unfortunately this cycle is perpetual. Baskin Robbins Syndrome applies to any profession. So even if you're immensely interested in what you do for a living, you will eventually grow to hate it. Don't you think Taco and crew have had mornings where they wake up and go "wow, fuck slashdot, im going to go be a hamster farmer..."
I went through this a few years ago with IT security. I even tried going into gaming.
Eventually I solved the problem by taking a year off of anything work related to travel and clear my brain. This isn't an option for a lot of people, but if you can do it, it will change your perspective in a huge way.
Since alot of these 'pump and dump" domains are used for spam, Maybe icann could put any fees collected from known squatters into a national research fund to combat spam via infrastructure and development initiatives. That would be very cool.
Thanks for making people focus less on sending me physical junk mail. The development of a spam filter which automatically rubs it in feces and sends it back to the originator wasn't going so well.
The robots were the hard part. Stupid robots.
I've discussed with them, and we've all decided that we're just going to start dropping the new DHB (dozen hippie bombs) on hostile nations. The only question is.. what will we do with all the surplus dreadlocks?
One more trendy company that didn't have a security program gets compromised. It's almost as if ignoring the problem doesn't make it go away. Pentest, code review, remediate, and test some more. Or, you know, lose brand value...that's the other option.
Suggesting that because the university has fostered a large number of financially successful commercial ventures, that it could be toxic to the education of innovators is completely lame. In fact, it is so lame that I wonder if the topic was entirely made up for lack of content. Technological innovation can do 3 things that matter: 1. Advance society, making us all better in some way. 2. Foster financial stability for large numbers of people. 3. Raise questions about either number one or number two. Without financially successful technological innovation, we'd be Cuba in the 50's. Really happy, not that prosperous, and ready for a big change that would fuck us all.
all these assholes could just stop storing everything in cleartext, and the problem would just go away without needing to involve bureaucrats.
This breach is due to the transition from the capable staff at SOE to the new security retards at SNEI. In fact, Shannon Lietz and her entire group should be fired. It has nothing to do with the industries inability to adapt. If that were true, then massive platforms at companies like and google would fail regularly, but they don't. The server architectures and application deployments are practically the same. Bottom line - Sony is an exception, and they are an exceptional fuck up.
So..... they didn't have any internal firewalls prior to this relatively small acquisition?
has college graduation been the equivalent of "training" ? I don't know a single doctor who, even after acquiring their MD would suggest that they are "trained" in a given specialty.
and this place sucks a seriously huge bag of dicks. Wait, they only monitor facebook right?
Seems kinda short sighted to only limit him to talking about PS3 when Sony is so far down the road on the development of a new platform (ie 4)
This will never happen, if only for the reason that the Australians are afraid that we'll start comparing them to the Chinese.
Infoworld story doesn't load on my iPhone. Guess it's a flash site. Classic.
Funny... our government and military installations have arguably the longest history of being extremely bad at information security. We also have the nasty habit of leaking information. Screenshots to follow within 12 months guaranteed.
My time machine must be broken. I think im listening to an argument from 1990....
Oh yes, lets do that immediately. I can't think of anyone i'd like to have my fingerprint more than Visa and its 500 service providers. The credit card companies barely care about the issue at all actually. This is why they force the onus onto all the acquiring banks and SPs, and the acquiring banks force it onto the merchants. There has been a zero sum when it comes to investigation of a method for wholesale change to the way credit and debit are processed mostly because the view of the stakeholders is that its not truly broken. All the money spent on PCI-DSS and subsequent offshoots like PA-DSS is a waste. What the brands and the SSC should have chartered was a bunch of MIT math people to figure out how to practically take large amounts of data and redistribute it in a format that isn't completely retarded.
I had my wife's drivers license in my wallet because she forgot her purse when we were out and I accidentally handed it to TSA.. who subsequently waved me through...
Either way... i'm not too worried about anyone in that particular government agency becoming adept anytime soon, so maybe they have to rely on things like people who adamantly refuse to give out their ID. Its like a high profile game of spot the retard.
"The Canadian government has been the victim of a massive cyber." makes it read like there was a huge e-orgy in Canada.
I guess i'm naive to believe that an administration which has consistently fear mongered its way into passing ridiculous legislation needs to be replaced by one which, at least appears to be diametrically opposed to everything thats been broken already. Oh well...
the response from the republican party that reads something like:
"Supporting article II doesn't necessarily infer that we're willing to arbitrarily wire tap Joe Citizen.."
and then of course, 3 more months go by, and everyone who is not considered a privacy advocate or a nutjob completely forgets about that they made this statement, the hundreds of others like it from this administration, and the blatant Orwellian nature of the country that we're living in.
Nothing is going to get resolved without a legislative body, preferably congress, stepping in and saying "no, article II does not mean that, and by the way we're burning the patriot act."
Dear Democrats, please win.
Thanks,
-a guy who likes to talk about guns on the phone, but poses zero threat to national security.
This is another perfect example of the federal government not enforcing HIPAA whatsoever. Its a great standard. Like PCI, easy to read, very prescriptive, and leaves little room for interpretation. Unfortunately, because of the way it was put into effect, it will likely never be enforced.
The only fallback that people have legally is that California privacy bill that's mentioned in section 12 of PCI.
Robot reassembles you! Also, then reassembles self and purchase wodka on your credit card.
I think the biggest takeaway I had was that the rest of my life is more important than what I do 8-5. Try to enjoy all the other things that life offers at least at the same level of effort you put into your job.
You have what I like to call Baskin Robbins Syndrome. It's where you really really dig ice cream - UNTIL you get a job where you can eat a bunch of free ice cream. You now loathe ice cream.
Unfortunately this cycle is perpetual. Baskin Robbins Syndrome applies to any profession. So even if you're immensely interested in what you do for a living, you will eventually grow to hate it. Don't you think Taco and crew have had mornings where they wake up and go "wow, fuck slashdot, im going to go be a hamster farmer..."
I went through this a few years ago with IT security. I even tried going into gaming. Eventually I solved the problem by taking a year off of anything work related to travel and clear my brain. This isn't an option for a lot of people, but if you can do it, it will change your perspective in a huge way.
Since alot of these 'pump and dump" domains are used for spam, Maybe icann could put any fees collected from known squatters into a national research fund to combat spam via infrastructure and development initiatives. That would be very cool.
Thanks for making people focus less on sending me physical junk mail. The development of a spam filter which automatically rubs it in feces and sends it back to the originator wasn't going so well. The robots were the hard part. Stupid robots.
I've discussed with them, and we've all decided that we're just going to start dropping the new DHB (dozen hippie bombs) on hostile nations. The only question is.. what will we do with all the surplus dreadlocks?