A Security Regression

Question

A Security Regression

Steve Jones - SSC Editor

SSC Guru

Points: 734434
More actions
April 30, 2020 at 12:00 am

#3746769

Comments posted to this topic are about the item A Security Regression

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

Eric M Russell SSC Guru Points: 125520 More actions · Answer 1

I don't know for sure either, but reading the FAQ, it seems like this wasn't a 3rd party hack but perhaps two employees abusing their privileges. I can picture a bored front desk clerk performing a large number of lookups on customer data - perhaps targeting celebrities or persons they know. If that's the case, then somehow Marriott's system monitoring was smart enough to differentiate potential misuse of data from normal usage patterns. Scenarios like that are more nuanced and the question would be when to report it as a data breach.

"Do not seek to follow in the footsteps of the wise. Instead, seek what they sought." - Matsuo Basho

Steve Jones - SSC Editor SSC Guru Points: 734434 More actions · Answer 2

It is hard to tell if this was employees or not. The wording from Marriott is very ambiguous.

Jeff Moden SSC Guru Points: 1003857 More actions · Answer 3

No... the bottom line is that no security is perfect especially from inhouse attacks. I got a report yesterday that even "Zoom" has been hacked an the account information for 500 thousand accounts is now for sale on the Dark Web.

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)