Yeah but a secure system should have stopped them. And even if that first safety net failed another one should have stopped the hackers from accessing the client’s crypto accounts. Why does a software dev’s computer need access to the live accounts.
Also why can they just access any website? Shit should’ve been locked down. They should’ve only be able to access whitelisted websites.
Any half way decent software designer, systems designer or IT security specialist always assumes at least some people are idiots, or naive, or make mistakes even though they know better.
And it only takes one of those doing their thing once for an attacker to get in.
So they design their stuff taking that into account, which in this case means DESIGNING THE FUCKING NETWORK TOPOLOGY SO THAT THE FUCKING PRODUCTION MACHINES DEALING WITH FUCKING BILLIONS OF DOLLARS AREN’T EXPOSED TO PCs WHERE USERS CAN INSTALL ANY SHIT FROM THE INTERNET!
(Sorry, got a bit pissed of with the tremendous incompetence displayed by whomever is their systems designer or whomever didn’t hire a fucking senior systems designer to setup the IT infrastructure of a Finance company)
Mind you, in my career I’ve also worked in Startups and they think somebody who has 5 years experience is senior and put them in charge of shit they really shouldn’t be in charge of or probably even touch, so this isn’t surprising to me, even if it’s still infuriating.
If we blamed every low level individual idiot who falls for malware, we’d be here all day and the malware would still be there. How about we blame the people pushing malware to millions of idiots? Also the companies who can’t even employ the most basic cybersecurity best practices to protect their own assets. It’s not like they were a small startup that can’t afford to.
Some idiot put some other idiot, kid, or incompetent bullshitter in charge of designing the network for a Financial company and they did what idiots, inexperienced kids and incompetent bullshiters do and put the Production machines in the same network and easily accessible by machines were users can install any random shit from the Internet.
Sooner or later something like what happened now would’ve happened.
The fault is entirely with the decision maker who chose to have somebody else other than a senior expert design the systems architecture of a business that is supposed to safekeep billions of dollars.
I’ll still blame the corporation gaining god knows how much money with this over the individual person, even if I also think a Developer should have know better.
The person to blame is the idiot clicking on ads for software downloads
Yeah but a secure system should have stopped them. And even if that first safety net failed another one should have stopped the hackers from accessing the client’s crypto accounts. Why does a software dev’s computer need access to the live accounts.
Also why can they just access any website? Shit should’ve been locked down. They should’ve only be able to access whitelisted websites.
Indeed.
Any half way decent software designer, systems designer or IT security specialist always assumes at least some people are idiots, or naive, or make mistakes even though they know better.
And it only takes one of those doing their thing once for an attacker to get in.
So they design their stuff taking that into account, which in this case means DESIGNING THE FUCKING NETWORK TOPOLOGY SO THAT THE FUCKING PRODUCTION MACHINES DEALING WITH FUCKING BILLIONS OF DOLLARS AREN’T EXPOSED TO PCs WHERE USERS CAN INSTALL ANY SHIT FROM THE INTERNET!
(Sorry, got a bit pissed of with the tremendous incompetence displayed by whomever is their systems designer or whomever didn’t hire a fucking senior systems designer to setup the IT infrastructure of a Finance company)
Mind you, in my career I’ve also worked in Startups and they think somebody who has 5 years experience is senior and put them in charge of shit they really shouldn’t be in charge of or probably even touch, so this isn’t surprising to me, even if it’s still infuriating.
If we blamed every low level individual idiot who falls for malware, we’d be here all day and the malware would still be there. How about we blame the people pushing malware to millions of idiots? Also the companies who can’t even employ the most basic cybersecurity best practices to protect their own assets. It’s not like they were a small startup that can’t afford to.
Some idiot put some other idiot, kid, or incompetent bullshitter in charge of designing the network for a Financial company and they did what idiots, inexperienced kids and incompetent bullshiters do and put the Production machines in the same network and easily accessible by machines were users can install any random shit from the Internet.
Sooner or later something like what happened now would’ve happened.
The fault is entirely with the decision maker who chose to have somebody else other than a senior expert design the systems architecture of a business that is supposed to safekeep billions of dollars.
Blame should be shared. It’s not a full sum game. It’s a failure of every part.
I’ll still blame the corporation gaining god knows how much money with this over the individual person, even if I also think a Developer should have know better.
Or blame the company for hiring such an incompetent dev and then giving them access to systems with so much money on the line.