Jump to content
The Official Site of the Vancouver Canucks
Canucks Community

Equifax #*%^ up


DoughtysCheck

Recommended Posts

1 hour ago, J.R. said:

If the Dems endorsed him over Clinton, is Trump still Pres...?

Probably not. Trump's the king of bull$&!#, but it's a lot tougher to attack someone who is squeaky clean, at least compared to Hillary. What're you going to do, call him a communist? Not only is that incorrect, it's really the only move you've got. Plus Bernie is a lot better at communicating with and relating to Trump voters than Hillary could ever possibly be. 

Link to comment
Share on other sites

2 hours ago, SabreFan1 said:

That didn't go well for him.  If he runs again in 2020, I'm not sure how he'd do.  There are still hard feelings among his supporters from when he endorsed Clinton after the Democrats used every dirty trick to keep him from getting nominated.

IMO, there's too many problems with Bernie, now.

 

Your point about losing support from his base is a good one.  Hillary casting some blame his way in her book, plus pointing out that he isn't a real Dem could easily cost him party support.  Unless the DNC wants to make nice after blackballing him last time, I can't see him doing well.  My guess is the DNC doesn't give a crap, cuz he is likely too old to be Prez anyhow.

 

And unless he wins a big Powerball or two (and likely not even then), he can't hope to win on an Independent ticket.

 

Link to comment
Share on other sites

26 minutes ago, Kragar said:

IMO, there's too many problems with Bernie, now.

 

Your point about losing support from his base is a good one.  Hillary casting some blame his way in her book, plus pointing out that he isn't a real Dem could easily cost him party support.  Unless the DNC wants to make nice after blackballing him last time, I can't see him doing well.  My guess is the DNC doesn't give a crap, cuz he is likely too old to be Prez anyhow.

 

And unless he wins a big Powerball or two (and likely not even then), he can't hope to win on an Independent ticket.

Money isn't a problem if his base supports him like they did in 2016.  He wouldn't run on an Independent ticket for the same reason he didn't do it last year; it would split the vote and guarantee that the GOP would win the White House again.

 

I think Joe Biden is the front runner right now for 2020.

Link to comment
Share on other sites

Just now, SabreFan1 said:

Money isn't a problem if his base supports him like they did in 2016.  He wouldn't run on an Independent ticket for the same reason he didn't do it last year; it would split the vote and guarantee that the GOP would win the White House again.

 

I think Joe Biden is the front runner right now for 2020.

Quite possibly, but I don't know if that is a good thing for the Dems.  Part of the reason Hillary lost was that she was basically a continuation of Obama.  If Biden doesn't offer more than Obama's platform, it could be a very tough fight for him, although I assume he has much less dirt on his hands than Hillary does.

 

Then there's Trump's performance.  I guess it all comes down to how the economy and jobs are rolling in a couple years.  If Trump can claim a win there - or, more precisely the media can't pin a big loss against him - it probably won't matter who runs for the Dems.  If Trump's economy stumbles, he's so screwed in 2020.

Link to comment
Share on other sites

45 minutes ago, Johnny Shotgun said:

It's probably just the shady/greedy world of banking and finance devouring itself from within.  A snake eating it's own tail.  Hackers make an easy scapegoat.

Nope.  It's definitely hackers.  People have been stealing identities for many years.  Equifax and the other credit bureaus just make it easier for thieves to do now with poor security measures.  Why pay for air tight security when it's just easier to buy off the politicians.  They have the vast majority of the GOP as well as the majority of moderate Democrats at their beck and call.

Link to comment
Share on other sites

1 hour ago, Kragar said:

Quite possibly, but I don't know if that is a good thing for the Dems.  Part of the reason Hillary lost was that she was basically a continuation of Obama.  If Biden doesn't offer more than Obama's platform, it could be a very tough fight for him, although I assume he has much less dirt on his hands than Hillary does.

 

Then there's Trump's performance.  I guess it all comes down to how the economy and jobs are rolling in a couple years.  If Trump can claim a win there - or, more precisely the media can't pin a big loss against him - it probably won't matter who runs for the Dems.  If Trump's economy stumbles, he's so screwed in 2020.

I'll be surprised if Biden wins the nomination in 2020.  He's just the most prominant of the current potential candidates.  I think it's likely that you'll see a whole bunch of Democratic candidates just like we saw last election with the GOP hopefuls.  It's how Bill Clinton came out of nowhere to win in 1992.  He was the last man standing in a large group.

Link to comment
Share on other sites

People create fake versions of big companies’ websites all the time, usually for phishing purposes. But the companies do not usually link to them by mistake.

Equifax, however, did just that after Nick Sweeting, a software engineer, created an imitation of equifaxsecurity2017.com, Equifax’s page about the security breach that may have exposed 143 million Americans’ personal information. Several posts from the company’s Twitter account directed consumers to Mr. Sweeting’s version, securityequifax2017.com. They were deleted after the mistake was publicized.

By Wednesday evening, the Chrome, Firefox and Safari browsers had blacklisted Mr. Sweeting’s site, and he took it down. By that time, he said, it had received about 200,000 hits.

Fortunately for the people who clicked, Mr. Sweeting’s website was upfront about what it was. The layout was the same as the real version, complete with an identical prompt at the top: “To enroll in complimentary identity theft protection and credit file monitoring, click here.” But a headline in large text differed: “Cybersecurity Incident & Important Consumer Information Which is Totally Fake, Why Did Equifax Use A Domain That’s So Easily Impersonated By Phishing Sites?”

Continue reading the main story
 

It would be just as easy for phishers to create their own versions of the Equifax page, and that would be bad news for anyone entering the information required to enroll in identity theft protection: their surname and the last six digits of their Social Security number. (In Mr. Sweeting’s version, the form was disabled so that no information was saved.)

“Their site is dangerously easy to impersonate,” Mr. Sweeting said in an email, noting that he had created the site solely to draw attention to the weakness of Equifax’s security. “It only took me 20 minutes to build my clone. I can guarantee there are real malicious phishing versions already out there.”

“It’s in everyone’s interest to get Equifax to change this site to a reputable domain,” he added. “I knew it would only cost me $10 to set up a site that would get people to notice, so I just did it.”

In a short statement on Wednesday, Equifax said all posts containing the wrong link had been deleted.

“We apologize for the confusion,” the statement said. “Consumers should be aware of fake websites purporting to be operated by Equifax. Our dedicated website for consumers to learn more about the incident and sign up for free credit monitoring is https://www.equifaxsecurity2017.com, and our company homepage is equifax.com. Please be cautious of visiting other websites claiming to be operated by Equifax that do not originate from these two pages.”

 

An Equifax spokeswoman, Marisa Salcines, did not respond when asked why the company had created a separate website rather than a subdomain of equifax.com.

That, cybersecurity experts said, was the key mistake. Phishers cannot create a page on the equifax.com domain, so if the website were hosted there instead, it would be easy for users to tell that the page was legitimate.

“You would think that would be the obvious place to start,” said Rahul Telang, a professor of information systems at Carnegie Mellon University. “Create a subdomain so that if somebody tries to fake it, it becomes immediately obvious.”

“Equifaxsecurity2017.com,” on the other hand, looks so unofficial that Mr. Telang said even he had been unsure at first whether it was safe to enter his information.

Mr. Sweeting explained in his email that a Linux command, “wget,” allows anyone to download the contents of a website, “including all images, HTML, CSS, etc.”

“It was super easy to just suck their whole site down with wget and throw it on a $5 server,” he wrote. “It currently has the same type of SSL certificate as the real version, so from a trust perspective, there’s no way for users to authenticate the real one vs. my server.”

Mr. Telang said Equifax’s actions suggested that the company had never anticipated or planned for a data breach.

“If you don’t have a plan in place, you will find different ways to screw it up,” he said. “Equifax is just a perfect example of that.”

All of the incorrect tweets ended with “-Tim,” indicating the name of the Equifax employee who wrote them. The Equifax spokeswoman did not say whether any disciplinary action had been taken, and Mr. Sweeting said he hoped the employee had not been fired.

“They probably just Googled for the URL and ended up finding the fake one instead,” he said. “The real blame lies with the people who originally decided to set the site up badly.”

 

 

https://www.nytimes.com/2017/09/20/business/equifax-fake-website.html?mcubz=1

 

 

Just major facepalms all around

 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...