Even with an 0-day, why was consumer data not encrypted at rest with segmentatio... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

		kromem on Sept 8, 2017 \| parent \| context \| favorite \| on: Equifax Faces Multibillion-Dollar Lawsuit Over Hac... Even with an 0-day, why was consumer data not encrypted at rest with segmentation for access? If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?

matchagaucho on Sept 8, 2017 [–]

True. A flaw in the perimeter doesn't forgive poor data management practices.

Given the number of FS sites running on IBM Websphere and Struts, this may only be the tip of iceberg.

omilu on Sept 9, 2017 | [–]

FS == Financial Service???

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact