UPDATE: OPM said that 3.6 million of the 4.2 million people affected by the first breach were also in the casualty count of the second breach, so the total should be around 22 million instead of 25 million. However, they added 1.8 million fingerprints to the mix. OPM said that notifications for the second breach […]
Continue reading → [DISPLAY_ACURAX_ICONS]In March I wrote about Max Schrems one man war against Facebook and their privacy-stealing policy (see post here). He originally went to the Irish data protection commissioner but withdrew that complaint after it became clear that nothing would get resolved in that venue for years. Then he went to the Vienna District Court saying […]
Continue reading → [DISPLAY_ACURAX_ICONS]IAPP published a summary of the hearings on Capitol Hill regarding the OPM breaches. The revelations certainly explain the mess, but also continues to raise the question about where Congress has been over the last 6 years. It is certainly OK to beat up OPM management, but I don’t see Congress taking any of the […]
Continue reading → [DISPLAY_ACURAX_ICONS]While OPM still garners most of the attention and the number of potentially compromised records continues to rise – that number now could, possibly, be as high as 32 million – 1 in 10 Americans, other reports show that credentials for other government users can be found on Pastebin. Part of the problem is password […]
Continue reading → [DISPLAY_ACURAX_ICONS]A newly published article in The Intercept says that the NSA and GCHQ hacked anti virus vendor’s software and networks in order to “neutralize the threat” posed by that software. Based on newly released Edward Snowden documents, GCHQ obtained a warrant in 2008-2009 to have legal permission to monitor web traffic, hack email and reverse engineer […]
Continue reading → [DISPLAY_ACURAX_ICONS]While the OPM continues to muddle around in dealing with their breach and telling the public what happened, more news stories are coming out. First, the White House ordered agencies to tighten things up in a security sprint. While using agile terminology is nifty, my guess is that most of these agencies are more familiar […]
Continue reading → [DISPLAY_ACURAX_ICONS]