Posts by Matthew Poole
Last ←Newer Page 1 2 3 4 5 Older→ First
-
http://tvnz.co.nz/national-news/hacking-teacher-employed-winz-s-company-5136805
Bloody hell. They could generated electricity from that much spinning. -
OnPoint: MSD's Leaky Servers, in reply to Kyle Matthews,
I think David's concern was more that Keith didn't give MSD a prompt heads-up, meaning the window of opportunity for others to exploit the weakness remained open for longer than might've been necessary. In the context of two years, though, a week is nothing.
-
OnPoint: MSD's Leaky Servers, in reply to David Chittenden,
Keith didn't know it had been that long when he started (nor did anyone else, except the security testers and whoever ignored their recommendations), but the kiosks were big news when they arrived so he probably had some vague suspicion that this wasn't a hole that had appeared within the past few months.
-
OnPoint: MSD's Leaky Servers, in reply to David Chittenden,
Even if the breach had already been going on for some time it seems to me that one week is a long time to knowingly keep very sensitive information unprotected.
The breach is roughly two years old, dating back to when the kiosks were installed. One week is neither here nor there.
As for taking the time, if Keith hadn't documented so thoroughly it's entirely likely that his concerns would've been dismissed. After all, as it has turned out MSD were informed in April 2011 that this flaw existed. And they did nothing. Without solid evidence of the scale what makes you think anything would've changed? Keith wanted the scoop, sure, but government departments aren't known for their swift action in the absence of a blazing public fire.
-
OnPoint: MSD's Leaky Servers, in reply to Martin Lindberg,
-
OnPoint: MSD's Leaky Servers, in reply to Joe Wylie,
I'm proud to say I know Jeff Smith. And if that's taking delight in someone else's cognitive disabilities, oh well.
-
OnPoint: MSD's Leaky Servers, in reply to Sam F,
Thread would not be complete without this properly hatstand effort from a name familiar to some…
Oh, dear <deity>. The stupid. It burns. Make it stop. MAKE IT STOP!
-
OnPoint: MSD's Leaky Servers, in reply to Islander,
30Mbps = normal here
My comment to Ben goes just as much to you, then >-|
-
Hard News: Special Sources, in reply to Hebe,
To a journalist anywhere else in the world, who gives about the whole saga.
A major security failing at a major government department is newsworthy anywhere in the world. There's been coverage of this in Australian media (and not just the republication of my doom prophesy, either), as well as ZDNet and the Beeb. Not necessarily multiple breathless stories, but it's a story of sufficient size to make ripples all over the world. After all, governments hold data about citizens in every country on the planet, and pretty much every one of them also has an extensive computer system that could be opened up by a screwup such as this.
-
OnPoint: MSD's Leaky Servers, in reply to Jeremy Andrew,
Considering the Police have been told they aren’t allowed extra money, even though they have gang members trying to join up.
I was puzzled as to how more money would help. They do background checks on applicants now.