Authorization is yet another security disaster

One would think that having one of the most high-profile breaches in recent memory would make a company take security to heart, but Equifax is full of surprises. The latest is that its site, to which the company invites those affected by its poor security practices to freeze and unfreeze their credit, itself has extremely poor security.
It’s all documented by security researcher Brian Krebs, who discovered the issue not in some special investigation but in the process of signing up at the site himself. What he found was that “getting an account at was easy. In fact, it was too easy.”
In matters of banking and credit, identity is a very important thing to establish. That’s why when you go to, it asks you for an email, then for your Social Security number and date of birth.

A year later, Equifax lost your data but faced little fallout
See also:
Leave a comment
  • Latest
  • Read
  • Commented
Calendar Content
«    Май 2019    »