Sort of related. What I have wondered about the Equifax hacks is how did they know this happened. As things have moved along, they seem able to identify which accounts were touched. So I have to go with the idea they are using active audit and monitoring tools on servers to do so. This would also imply normal reporting coupled with alerts for activity out of the ordinary. While everyone is cussing them out for not applying proper patches, why are we equally not crucifying them for not using their tools properly to begin with. And if there is an explanation for that, it should also be noted as a weak point or flaw to be focused on.
2 Likes
Private contractors are always so much better than direct government employees!
4 Likes
Maybe completely unrelated, if you havenât for a loan in years, like say more than 15, and paid off said loan 4 years ago, is this equifax hack anything to look into? A guy I work with checked his out but seem like in order to do it you have to create an account and I donât even want to since that means tying in my email account and I donât trust equifax enough to want them having anything to do with my email. Should I even worry about it and if so should I create a new email to sign into them with? And speaking of hacking emails, I had an old yahoo email that I havenât used for years. should I just ignore them, not bother logging in and let it die?
Weâve been losing the Cybersecurity war ever since Edward Snowden defected. (If thatâs what it was).
2 Likes
Word.
1 Like
Was his name Edward Snowden?
Yeah, too bad about her private email server, right?
Who was the smart one here?
1 Like
I have to wonder how they were able to transfer it to their personal computer, to tell you the truth. I was always under the impression that any classified information was kept in such a way that it was a. compartmentalized and b. unable to be moved to a personal computer without said PC being the property of the agency in question.
2 Likes
I would not be surprised if Trump, Pence, Ryan, Tillorsen, Ross, Cuck Kushner, Ivank Trump and other American traitors working for the FSB to rig the elections and to attack our democracy were involved in, enabled or facilitated these attacks on the American military, mercenary, intelligence complex.
Donât forget Cuck Kushner still gets the Presidential Daily Brief, which contains military secrets and national security intelligence.
The war was lost by Obama by failing to act on the Russian interference when he knew and had the chance last summer.
The Russians won.
This ainât exactly Mission Impossible is it?
Mebbe they should hire Hollywood to do their security.
It always works in the movies, wellâŚunless youâre Tom Cruise!
I would presume if they are able to copy the data to a flash drive or such it becomes pretty pedestrian. I have to wonder about check in and out systems that should track access to records and files in systems and the lack of oversight. Additionally, I also have to wonder about encryption and obviously the ability to beat it and then of course transport it offsite to a consumer desktop or laptop. If he had to work from home, why did he not have a secured unit on a VPN style connection. Well beyond my expertise in understanding what the NSA would impose on data and data management, but it seems pretty thin at this point. Then there is the physical management of personnel. An example though it is from long time back. My brother worked in a highly secured area in the military. They were not permitted to remove materials from their work areas as well as the premises. The data drives and any paper not in use were placed in a burn safe or similar when not in use. Personnel entering and leaving the building were searched for forbidden items including disks, paperwork and so forth. Additionally, the work environment meaning systems were managed under Tempest guidelines with heavy regard given to emissions control. Again, this is somewhat outdated. But the mentality is what I am looking at. At least with these contractors, it seems that mentality no longer exists.
1 Like
Yeah, it definitely seems that for an agency that deals with secret and classified materials, they certainly have the Keystone Cops in charge of keeping it that way, if thefts like this are so easily done.
1 Like
Well they certainly need to rethink the contractor usage.
You can review your credit information once a year for free through Equifax, TransUnion and Experian. Stagger the reports out and you can look at it on a 3-4 month basis.
The key to all of this in my opinion is grasping that it is not simply that your credit data is compromised, but how much information these entities have on you as a person and how and where it may be be used.
To answer your question, in my opinion, you should take some level of concern. How much is up to you. Looking at what information they do have on you is a place to start to make an assessment.