None of that matters if there isn't basic locked-down security on the systems. Of which there probably wasn't, it wasn't monitored, or no one simply thought it important until the problem occurred.
If I were trying to access a system without permission, I'd probably attempt to destroy logging and other measures as well as recover the wanted data.
None of that matters if there isn't basic locked-down security on the systems.
The ease of getting into the system is a separate matter from the effort applied to catch the people once they did get into the system. Whether the bike thief cuts your Kryptonite lock or you just left it unlocked in front of the store, you'd still like to see the bike thief caught and punished.
Absolutely. But again, the problem with most of these breaches is they could have been prevented in the first place by using a lock, any lock.
Yeah that's patently obvious. But not all of these breaches are because of poor system security. Remember, fallible human operators exist in the system, and actual skilled hackers exist too. In the case of the hotel chain, it looks like root access was obtained because they stole unencrypted data from the site before they ran Conti on it.
(post is archived)