rational fear of internet security

[SteveP]

Stock exchange closed for hours, wsj crashed prob cause of the market.
United airlines crashes ( wrong term) and is locked down for hours.

This ..one day in the year 2015.

Anyone else worried about this stuff?

And believe me... when they say it has nothing to do with hackers..i automatically think it is hackers... from who knows where.

[robin3mj]

Homeland Security says it was not hackers, so nothing to worry about. You trust them, right?

I fly often enough to be a little sketched out.

[mg2ride]

...

Anyone else worried about this stuff?

....

Y2K Hype all over again.

[monadnocky]

I found it funny that, about five minutes after the Wall Street glitch, the Department of Homeland Security announced that it wasn't due to any kind of act of terror/hackers. You know, because in that amount of time you can go through billions of lines of code to make that determination.
I mean jeez guys, at least give it a few days to make your "investigation" a little more credible. You're not even trying anymore.

[vertical_doug]

Y2K Hype all over again.

Everyone knows at the center of it all there is an old UNIVAC that powers the internet. The last guy with keys to the replacement vacuum tube closet was downsized. We in trouble now.

[SteveP]

Homeland Security says it was not hackers, so nothing to worry about. You trust them, right?

I fly often enough to be a little sketched out.

Yeah, I was talking on the phone about this to a friend of mine and the homeland security guy who was listening in on the conversation kept cutting in and telling us we had nothing to worry about... everything was fine. He also told me darren was looking at getting a new bike and watch vsalon for pictures. So, I guess I'm ok with it

[Mike Mcdermid]

whats the stock exchange if its for rich people i wont have heard of it

[Matthew Strongin]

The DOW and NASDAQ are on the rise today. Clearly someone was just rebooting the stock market. No different than when your cable goes out and the service desk tells you to reboot the receiver. It really does work.

[Scott G.]

Wall Street
Somebody accidentally picked "shutdown w/windows updates" instead of "Restart"
Windows applies 176 updates, that'll keep you offline for 4 hours.

The Airline, the punch card machine went down.

[Nierman]

I don't have time for such worries - I'm too busy planning out my final four remaining good years.

[EricKeller]

I don't have time for such worries - I'm too busy planning out my final four remaining good years.

sorry, it was a Skynet dry run, and you know how it turns out. You don't have 4 more years.

I'm pretty worried about security. Businesses and banks went online without enough security. My bank doesn't even have 2 factor protection yet, they have some stupid windows add-in program. Screw that, i want a password plus a key provided over a different physical link.

The hacking of point of sale terminals is ongoing. Companies figure they can survive the occasional breech and only suffer a little. And the more companies it happens to, maybe they are right, we'll just get used to it. I've heard that they aren't fixing these problems. Not the end of the world, but at some point it has to come back to costing me money.

We are going through a massive security update here at work. For years, I've been trying to keep people from doing stupid things to their computers, but it was always an uphill battle. And it was endemic, everyone was sloppy, so we were owned by Chinese hackers. Now they are locking things down very solidly.

[xjoex]

It is an interesting time, the internet was not designed for commerce. Then everyone made money using it, and then hacks started.

So now we are playing catchup. 95% of hacks are easy low hanging fruit. Companies implement firewalls, av, etc and then they put a system on the public internet with default passwords. Or a person is phished, and the attacker VPNs in with the Sys Admins credentials.
Attachment 83314

Also don't forget about insider threat (self inflicted wounds). I worked with a .gov that took the entire agency offline for 5 days because of a contractor botching an AD server upgrade!

Then think about Target, they were hacked by an attacker compromising the 12 person HVAC company they outsourced with. How could the HVAC company compromise all those credit cards? Because the HVAC systems were on the same network as the point of sale machines, and they had a point to point VPN in... Why not put in a little segmentation?

Then you have Home Depot, etc, etc.

Things are changing, attackers are certainly getting better too. But in most cases the front door is still unlocked and the windows are open.

What is changing? Well in the past the credit card companies covered the losses. But Target was sued by the CC companies because it was found they ignored intrusion alerts saying they were hacked. Target lost and has to cover the costs. Companies took notice. It will take a decade at least before we see real improvement.

-Joe

[j44ke]

Because the same guys who wired your house for electricity way back when are now doing networks. Cheap. "I got a brother..."

Nothing to worry about.

[EricKeller]

Because the same guys who wired your house for electricity way back when are now doing networks. Cheap. "I got a brother..."

Nothing to worry about.

how many security consultants saw that there is money to be made and went in to business, experts on board or no experts on board? I've wanted to put up a firewall in my labs for years, but it's not allowed because they are afraid of people masking their activities. And then this happened: Penn State’s Engineering School Computers Hacked - WSJ We were down for days

[Honus]

Things are changing, attackers are certainly getting better too. But in most cases the front door is still unlocked and the windows are open.
-Joe

And sometimes you put out a big WELCOME mat. Hello Sony? Anyone home? We'll take half of all your data, thank you very much...

And now people want to connect every freaking device you own to the cloud. The definition of the cloud is "someone else's computer."

[sk_tle]

Most IT security concerns aren't technical. I'd like to give examples are they are tons of them but I can't say it under my own name as it could be used against my employer or the previous ones. The simple fact I am able to say I work for an IT department should be considered a security flaw if we took IT security seriously.