I was gonna post something snarky, but I got nothing. So here

ArkAngel: I was gonna post something snarky, but I got nothing. So here

I was, too.

But I got distracted.

ArkAngel: I was gonna post something snarky, but I got nothing. So here

[granthestonfitness.com image 480x240]
[img122.imageshack.us image 640x355]
[i43.photobucket.com image 355x266]

body double or ass pads plus she has fried egg tits anyway and before you ask my gf's a superdupermodel.

Sounds like crime pays pretty good if you're good at what you do.

They are a public company. Fidelity National Information Services trades as FIS.

They sell banking software. If this report is true, they we are so screwed.

Should liven things up a bit at their Risk Oversight Summit in Washington. They are going to teach banks how to implement risk oversight policies.

What a joke.

Chances very high with a processor like that that it was social engineering rather than hacking.

vossiewulf: social engineering

When I was a kid we just called it "CRIME"

Rant time:

We're currently having political BS problems with our higher-ups at work. Our new Head Cheese is one of these Matlock types who figures computers are evil and out to get him. He literally asks us to set his screen saver password to an hour and 15 minutes, so he doesn't have to enter his password again when he comes back from lunch. Worse, now all these annoying "I know about computers" types are getting a sympathetic ear when they try to go over our heads asking for admin rights they don't need, etc. You know, because we're the bad guys because we won't let a VIP's computer set unprotected, email/file shares open, for over an hour. Head Cheese doesn't want to hear anything about good security practices or limited rights, he just wants the people talking about computers to leave his office through the fastest way possible, which is telling us to "just do it".

Meanwhile Lulz and Anonymous are tearing a hole through half the internet, every day another company is announcing another multiple-thousand loss of SSN or cc#'s, and these people treat these events like they're sci-fi. No, that doesn't really happen to anyone, wait why is my bank cancelling my debit card again? Vendors asking you to open up 1433 to your internal SQL server containing PHI to the entire outside world, users replying with their passwords to any old email they get that asks, and all you get is static for every damn problem you try to fix. We've had black-hats setup full mock-ups (good ones, too) of our Central Authentication page in an attempt harvest passwords and still these farks just wave away our concerns like we're Chicken Little.

You really have to wonder how bad it has to get before companies start taking this shiat seriously.

jayhawk88: Rant time:

We're currently having political BS problems with our higher-ups at work. Our new Head Cheese is one of these Matlock types who figures computers are evil and out to get him. He literally asks us to set his screen saver password to an hour and 15 minutes, so he doesn't have to enter his password again when he comes back from lunch. Worse, now all these annoying "I know about computers" types are getting a sympathetic ear when they try to go over our heads asking for admin rights they don't need, etc. You know, because we're the bad guys because we won't let a VIP's computer set unprotected, email/file shares open, for over an hour. Head Cheese doesn't want to hear anything about good security practices or limited rights, he just wants the people talking about computers to leave his office through the fastest way possible, which is telling us to "just do it".

Meanwhile Lulz and Anonymous are tearing a hole through half the internet, every day another company is announcing another multiple-thousand loss of SSN or cc#'s, and these people treat these events like they're sci-fi. No, that doesn't really happen to anyone, wait why is my bank cancelling my debit card again? Vendors asking you to open up 1433 to your internal SQL server containing PHI to the entire outside world, users replying with their passwords to any old email they get that asks, and all you get is static for every damn problem you try to fix. We've had black-hats setup full mock-ups (good ones, too) of our Central Authentication page in an attempt harvest passwords and still these farks just wave away our concerns like we're Chicken Little.

You really have to wonder how bad it has to get before companies start taking this shiat seriously.

It will change only when it costs them money. Until then, you are farked.

End_Of_Line: Yes, the only thing that will change is that you (and your staff) will be out of work. And why? Because ACTUAL security is too HARD for them! For crap's sake, you should hear the crying when it comes time to change passwords where I work.
"But I have always used my pet's/kid's/spouse's name and then the month we are in! Why do I need to add a special character? I will never remember that!"

Cue the Farnsworth meme about not wanting to live on this planet any more, please.

We recently changed ours to a years expiration, and still they biatch. It's unbelievable. You should hear some of these assholes call in and read us the riot act because we require them to fax us a photo ID before we'll reset their password for them over the phone. It's sad. Things are getting worse and worse when it comes to keeping things secure, the stakes are getting higher and higher, but still we are forced to loosen things up, not tighten.

Hell, just a couple weeks ago I got my XBox Live hacked. When I signed up, I used my work email to register, which I had used years ago to sign up for MSDN, and thus already had a Windows Live/Passport account associated with the address. XBox Live just slid right in there, and when I neglected to change my poor password on the Live account, boom, headshot. They bought $150 worth of points and transferred them to another account. Microsoft still hasn't gotten back to me on that.

cmunic8r99: jayhawk88:
You really have to wonder how bad it has to get before companies start taking this shiat seriously.

It will change only when it costs them money. Until then, you are farked.

Yes. And in my experience, sometimes not even a fatal blow (to the company) will be enough. I recommend that you, jayhawk88, have a backup plan of your very own. Not for company data, but for your own job... a parachute that you can wear in the event of disaster.

Sad but true.

/Standing around saying "I told you so", while satisfying in and of itself, is not enough to put bread on the table
//Generally, it's better to say "I told you so" from the comfort of your nice new job

wingnut396: Then you get the riot act because you didn't do everything right. Sure you can provide the documentation saying you have been denied funds to prevent the specific problem that occurred. You can point out the policies and the all the exceptions you were forced to take for political expediency, and the warnings you issued for those exemptions.

None of that matters. It is your fault. Oh, and you are overhead, and this failure just proves that it is the fault of antoher worthless overhead department that needs to be eliminated. I hear the cloud is nice.

Oh sweet jebus. Are you one of my co-workers? This sounds awfully familiar.

/actually, have heard it almost everywhere I go
//and I know everyone else has too

vossiewulf: Chances very high with a processor like that that it was social engineering rather than hacking.

That's what most cracking has traditionally been. People dumpster-driving to get printouts, people calling up receptionists pretending to be somebody else, etc.