CapitalOne was hacked

[Thunder22]

https://nypost.com/2019/07/29/capita...cker-arrested/

Capital One reveals 100M affected by data breach, hacker arrested


You can lock your cards in your online account if you want.

I just closed my moneymarket with them, too many problems with their security.

[JRD77VET]

So instead of "What's in your wallet?" You have to worry about WHO is in your wallet

[simpleman68]

Originally Posted by Thunder22

https://nypost.com/2019/07/29/capita...cker-arrested/

Capital One reveals 100M affected by data breach, hacker arrested


You can lock your cards in your online account if you want.

I just closed my moneymarket with them, too many problems with their security.

Well that sucks... they are a great card to carry overseas.

My neighbor is and has been the CTO of some large financial institutions.
He goes in to clean up their messes, when the poo hits the fan, and attempt to make them secure but the stories he comes to me with.... makes me not want to do business with any banks.
Scott

[04 commemorative]

Don't have their card.....

[Thunder22]

it was account application form data that was stolen.

https://techcrunch.com/2019/07/29/ca...mers-affected/

Also, Capitalone's infrastructure is run on AWS public cloud. The hacker was an ex AWS engineer.

[mrvette]

Originally Posted by simpleman68

Well that sucks... they are a great card to carry overseas.

My neighbor is and has been the CTO of some large financial institutions.
He goes in to clean up their messes, when the poo hits the fan, and attempt to make them secure but the stories he comes to me with.... makes me not want to do business with any banks.
Scott

My son's wife is high up in the Ca. computer trade, and her comments about most of the people on her dev team and even some bosses are not complimentary ....seems that many daze she has to go in herself to save the project.....I suppose she must be right, as she gets raises and promotions....but her brain starts exploding too.....methinks she is not alone, and it's common in all fields......

sort of the modern version of typical TV shops I worked at, head tech/shop mangler guys that could fix maybe 4-6 sets/day..... , shit, I could do 8-10/day easy, some daze I get lucky and do more than that.....

But it was in a dead end industry, sacrificed to that oriental conglomerate, Pitch It Tronics.....yawl heard of them......I suspect same shit going to happen to computers/programming occupation......

[snide]

Originally Posted by mrvette

My son's wife is high up in the Ca. computer trade, and her comments about most of the people on her dev team and even some bosses are not complimentary ....seems that many daze she has to go in herself to save the project.....I suppose she must be right, as she gets raises and promotions....but her brain starts exploding too.....methinks she is not alone, and it's common in all fields......

You may be surprised to learn how much software development has been outsourced to India and other "developing" countries. You may not be surprised to learn how incompetent those "engineers" are. And of course, they don't care about data security or sensitive data.

[TripleBlack]

Originally Posted by snide

You may be surprised to learn how much software development has been outsourced to India and other "developing" countries. You may not be surprised to learn how incompetent those "engineers" are. And of course, they don't care about data security or sensitive data.

This ^^^^^^


The company I retired from after many years used offshore development and QA testing resources extensively to maintain and augment their point of sale software. Always made me uneasy when managing a project.

[Stevedore]

Not in my wallet, no problem.

[Thunder22]

Originally Posted by snide

You may be surprised to learn how much software development has been outsourced to India and other "developing" countries. You may not be surprised to learn how incompetent those "engineers" are. And of course, they don't care about data security or sensitive data.

outsourced is different than employees residing in India.

Any company that does either, and doesn't monitor/approve/review the pull requests no matter who is doing the development, deserves the outcomes that they get.

[Cybercowboy]

This is the "girl" who did it.

[Stevedore]

From what I read, the twit posted a veterinarian's bill for one of her pets on the same "anonymous" hacker's forum where she was running her mouth about her Capital One hack. FBI took the posted image to the vet's office, said "Who is this?", then went & arrested her. Idiot.

[Thunder22]

she also didn't decrypt the data. so while the data as described was stolen by her, she never decrypted it, so she didn't even know what she had. Cap1 figured out what she had because they decrypted it after they realized what had happened. it's like some idiot in the 1800's stole a safe but never got inside it to see what he stole, other than the safe

other than the hacking part, this is over sensationalizing the data breach itself.