Literally this. It starts with “everything needs to be on an air gapped LAN so we can control it.” And then suddenly that air gapped LAN isn’t air gapped, because someone got tired of paying the call-out fee every time the on-call person had to drive to the site to push a few buttons on a keyboard. But figuring out a proper VPN (or at least a reverse proxy with access control) was too difficult or expensive, (management thinks the point is to save money on call out fees, not spend money on proper hardware) so they just poked a bunch of port-forwarded holes in the firewall and called it a day.
Carl
joined 2 months ago
And the genocide of the Native Americans. Hitler used that as the inspiration for the holocaust.
In a statement, Murphy cited the recovery amount, personal payments by former executives, a commitment for $7 million to go to nonprofits and the absence of a confidentiality provision in a system where “wrongdoers too often hide their misdeeds by dangling compensation in front of those they victimized and trading that compensation for confidentiality or an NDA.”
Glad they stuck to their guns. I’ve been following this case for a few years now. This all began as an attempt by eBay’s C-level executives to bully a few reporters into silence. It makes perfect sense that those reporters would refuse to accept an NDA as part of the settlement, because reporting on things like this is exactly what landed them on eBay’s radar in the first place.
Not-for-profit is still a corporation, and the distinction simply means that they need to reinvest profits back into the company. A for-profit company can sit on massive amounts of stockpiled wealth, while a not-for-profit needs to find ways to reinvest that back into the company. To be clear, they can still sit on a lot of money. But all of their money needs to be earmarked for something, instead of just being a rainy day fund.
Users choose not to update to avoid rebooting. The average user barely even knows what an OS is. They just know that if they reboot, they’ll lose their 347 Emotional Support Chrome tabs. Lemmy tends to be fairly tech literate, which means conversations about tech often involve the Average Familiarity problem:
The issue is doing one at scale, with proper access controls. Also, let’s not skip past the whole “network isn’t air gapped anymore” side of things. Now you’re having to maintain firewalls, patch firmwares, manage users, enforce good password hygiene, etc… All without any additional IT support or hardware, because management is doing this as a cost cutting measure.
I can pretty much guarantee that the systems that get hacked aren’t the ones that do everything right. They’re the ones who have a single shared VPN password, haven’t updated their firewall since it was installed 8 years ago, and they haven’t even changed the default passwords for their control systems. Because they got tired of answering phone calls about what the password was, so they just made every username and password something stupid like admin/admin.