Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search
 

trumad

(41,692 posts)
Thu Feb 5, 2015, 11:12 AM Feb 2015

My quick take on the huge Anthem hack.

80 million customers had their information compromised. That's a lot---SS numbers, birthdays, etc. That's important personal shit.

I'm in the Cyber Security business.

Here' the thing---you're going to see a lot more of this in the near future.

Why? Companies like Anthem are simply overwhelmed with everyday attacks and they can't keep up. I know a Wall Street investor who told me that large Insurance companies are banging on Wall Streets doors to invest into companies who specialize in Security Operations Centers---better know as SOC's.

SOC's are much better suited to prevent attacks than an overwhelmed IT Security Department at some enterprise company.

It's really hard to find people with a Cyber Security skill set. The companies are understaffed and are running around trying to catch their tails.

In addition--these companies, if they are serious about protecting our shit, have to open their pocketbooks and spend some money.

It's the old stop sign affect---Put the stop sign up after the 10 car fatal collision.

Make no mistake---this is Cyber war and if we don't begin taking it a whole lot more serious---we're all gonna be fucked.

mho

12 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies

jeff47

(26,549 posts)
4. It's gonna keep happening until it costs companies more to not fix it.
Thu Feb 5, 2015, 12:57 PM
Feb 2015

We'll need something like a fine of $2k per SSN stolen, $1000 per credit card stolen for businesses to take this seriously enough to fix their data. Or more intelligently, not collect the data to begin with - if you never had it, it can't be stolen.

ProdigalJunkMail

(12,017 posts)
6. Why are they not encrypting this data?
Thu Feb 5, 2015, 03:37 PM
Feb 2015

accessing a network storage location in a hack (or a stupidly misplaced machine or drive) is commonplace. hell, kids can do it in some instances. but encryption technology would make the bulk of this information unreadable or at the very least too expensive to try and read to make it worth stealing... and that tech is readily available.

sP

ProdigalJunkMail

(12,017 posts)
9. The data in a database can be encrypted, too
Thu Feb 5, 2015, 04:51 PM
Feb 2015

no excuse. any identifying information should be encrypted.

sP

jeff47

(26,549 posts)
10. Only if you don't want to use the data.
Thu Feb 5, 2015, 04:55 PM
Feb 2015

Can't query on the encrypted data, for example.

So even if you put encrypted data into the table, you have to have the encryption keys easily available. And if they have sufficient access to be reading the table, they'll have sufficient access to get the keys.

ProdigalJunkMail

(12,017 posts)
12. we encrypt data every day in databases all over the world
Thu Feb 5, 2015, 05:05 PM
Feb 2015

and you can lock down the key repository so that it is NOT easy to get into. but what do i know? i am just some guy on the intertubes...

sP

Latest Discussions»General Discussion»My quick take on the huge...