View Single Post
Old 06-18-2015, 08:33 PM  
Barry-xlovecam
It's 42
 
Industry Role:
Join Date: Jun 2010
Location: Global
Posts: 18,083
Quote:
Originally Posted by Barry-xlovecam View Post
We believe ... Why, are the federal bosses really that stupid?

(That may be a rhetorical question.)
Turns out he was right

Quote:
Encryption ''would not have helped'' at OPM, says DHS official | Ars Technica

[B]ut when pressed on why systems had not been protected with encryption prior to the recent discovery of an intrusion that gave attackers access to sensitive data on millions of government employees and government contractors, she said, "It is not feasible to implement on networks that are too old." She added that the agency is now working to encrypt data within its networks. ...
... ... (*House Oversight Chairman Jason Chaffetz (R-Utah)) Chaffetz pointed out in his opening statement that for the past eight years, according to OPM's own Inspector General reports, "OPM's data security posture was akin to leaving all your doors and windows unlocked and hoping nobody would walk in and take the information."
They go on to say this sensitive data was stored on a 20 year old system written in COBOL

Quote:
He asked Seymour pointedly about the legacy systems that had not been adequately protected or upgraded. Seymour replied that some of them were over 20 years old and written in COBOL, and they could not easily be upgraded or replaced. These systems would be difficult to update to include encryption or multi-factor authentication because of their aging code base, and they would require a full rewrite.
But the government can spend $85 million a copy on new fighter jets
Barry-xlovecam is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote