- cross-posted to:
- cybersecurity@sh.itjust.works
- pulse_of_truth@infosec.pub
- cross-posted to:
- cybersecurity@sh.itjust.works
- pulse_of_truth@infosec.pub
cross-posted from: https://lemmy.zip/post/23749405
A $15.75 million promise.
…thats not a promise you can make. Infact, I’d argue that you’re inviting to get hacked, because now some hacker is out there like CHALLENGE ACCEPTED!
The easiest way is to not store the data in the first place. Can’t hack data that doesn’t exist. Why does anyone need to keep social security numbers on file.
Especially considering they were explicitly designed NOT for that purpose. Not only is it illegal for government agencies to deny you anything if you refuse to provide an SSN, but until 1972, this verbiage was printed on every Social Security card: “FOR SOCIAL SECURITY PURPOSES – NOT FOR IDENTIFICATION.”
Of course it is!
They’re not promising they won’t be hacked again.
They’re only promising they’ll try not to be. Which is promising practically nothing.
Promises not to get hacked
Fast forward next month …
We have a concept of a plan so as to not get hacked.
How do you promise an attempt?
that’s why they hired Wade. With Wade around, woo baby… there’s no doubt about it now.
Wade is just m something else.
T-Mobile is a great sell. But a horrible follow-through. Goodbye T-Mobile forever (as of last week).
Who do you use instead?
I mean, that’s fair. You can’t guarantee not to get hacked unless you shut down your company.