So many of these breaches just make me angry because they could have been and should have been prevented. A prefect case of this was Home Depot. The quote "We sell hammers" will be forever ingrained in my brain as the ultimate denial of reality. I understand that developers everywhere are under tremendous pressure to get things done on time and under budget, but I don't think it should ever come at the expense of security. If an 8-hour job takes an extra 2 hours to do correctly, then that's just the cost of doing business. The same thing applies to a 200-hour change. I know my management does not want to hear about the company on the news. There's always a new attack being developed, but many of them can be prevented by design. I don't expect this to hold true forever, but what is preventable should be prevented.

I don't think I'll ever get used to hearing about data breaches and quite honestly, I hope I don't get used to it. I also hope it doesn't devolve into the blame game. In the T-Mobile case, it's being reported as an Experian problem. If Experian was hacked and only T-Mobile customers were impacted, what vulnerability is there and why haven't others been impacted...yet? If the hole is there, it needs to be closed.