Primitive Persistent Threat
According to The New York Times, "sophisticated attackers" stole large quantities of customer data from Citi, using computers.
You can read the article here.
We know the attackers used computers, because they typed an account number into an URL bar, and computers have URL bars. Computers are sophisticated, and anyone who uses them is, apparently, "especially ingenious". Just see the article.
The hilariously informal tone of the articles have cemented Risky.biz on my feed list.
"TL;DR Typed account number into browser, owned bank."
...which is why CSOs need to encourage (pay for?) developers to do some secure coding courses.
I think this is a good thing perhaps. Let's all band together to make sure these things keep happening until enough people lose all faith in humanity and the system and we can rebuild a new more civilized and fair society not based off lies and dumbing everybody down.
Post new comment
User login
Recent podcasts
-
Get your hack on!
-
A chat with Arbor Networks founder Rob Malan...
-
The RFID devil's in the detail...
-
The programmable network with Christopher Hoff...
-
Who is doing a better job?
Recent comments
- Thanks for that Dave!
As for
1 day 15 hours ago - Congratulations on the Award and Thanks for all the Bleeps
1 day 20 hours ago - Yeah fully -- we'll give it a
2 days 21 hours ago - Was the vmware code ever released on May 5?
3 days 13 hours ago - BYOD tradeoffs misunderstood?
4 days 2 hours ago - awesome
4 days 14 hours ago - Congrats
1 week 3 days ago - Hey there Daniel, thanks for
1 week 6 days ago - Congratulations!
2 weeks 7 hours ago - Hey there... yeah it was
2 weeks 2 days ago

This says it all to be honest
"the law does not require the bank to implement the 'best' security measures available and that the bank is clear to customers when they sign up about the level of security it provides".
Similarly like it is customers' fault if the bank leaves its front door open and someone robs the bank? hold on a minute...
Who needs to be addressed to to get this changed? Can Riskybiz campaign/lobby etc to get this changed?