[LINK] Bruce Schneier: Privacy eroded in virtual world

[rchirgwin at ozemail.com.au]

This jerk corp was using its own system. Back in the exciting days of 
"how do we publish content? We need a Big Content Management System!!" 
LexisNexis wrote its own which it tries to sell to other 
sucker^h^h^h^h^h^h companies.

Netcraft identifies the Web Server as MS IIS. So that can't have been 
the problem surely? Suckurity is the #1 priority etc?

Reading Netcraft I notice a promotional for its toolbar on its home 
page, in which Netcraft says banks are posting insecure applications and 
opening users to phishing / man in the middle attacks. Apropros of jerk 
corps...

RC

Howard Lowndes wrote:

>I'd dearly like to know what sort of systems these jerk corps are using.
>
>
>On Fri, 2005-03-11 at 13:39, Craig Sanders wrote:
>  
>
>>On Fri, Feb 25, 2005 at 05:43:53PM +1100, Craig Sanders wrote:
>>    
>>
>>>BTW, the Choicepoint scandal in the US at the moment is an excellent example
>>>of the dangers.  identity thieves acquired personal details about hundreds of
>>>thousands of americans from Choice Point by setting up a phony business and
>>>registering as a choicepoint customer.  so far, over 750 people have been
>>>defrauded by identity theft as a result.
>>>      
>>>
>>and, predictably, there's another one:
>>
>>http://it.slashdot.org/article.pl?sid=05/03/09/2359234&tid=172&tid=218
>>
>>"Reuters is currently running a story regarding LexisNexis being tapped into
>>by identity thieves who accessed up to 32,000 customer profiles. Information
>>hit included names, addresses, Social Security and driver's license numbers.
>>This comes on the heels of rival ChoicePoint being breached for 145,000
>>profiles last month in a similar case. Better check yourself." 
>>
>>craig
>>    
>>