Anonymous: Trump is making America weaker and we’ll exploit it. The international hacker community is preparing to strike against U.S. infrastructure and calls for public awareness against incoming fascism

you are viewing a single comment's thread
view the rest of the comments
[–] 41 points 2 years ago* (5 children)

little script kiddies running around

Yeah, they're running around the Treasury Dept right now.

It’s been well known for decades that most government orgs have absolutely abysmal cyber security

Having worked with government agencies and a lot of large private organizations the thing that keeps them mostly secure is the amount of red tape involved with things. Patching a production system requires a teleconference with at least five different people and no one person knows everything.

The idiots without any security experience coming in to "streamline" things will just make the systems even more fragile and insecure.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 2 years ago* (4 children)

    Known and vetted systems are always the most secure. Until RSA is broken, and then they'll need to update to a quantum resilient standard. Which we've had in the wild for 6 years already and the NIST has officially approved for 2 years.

    We're still at least a decade away from a machine with enough qbits to do it. So i feel like we should be fine.

    It's the fucking Credit Bureaus, Telecoms, and Energy Companies I worry about. They keep fucking up.

    https://www.nist.gov/news-events/news/2022/07/nist-announces-first-four-quantum-resistant-cryptographic-algorithms

  • source
  • parent
  • hideshow 4 child comments
  • [–] 5 points 2 years ago (3 children)

    Anyone who complies with the NIST standards is in a good place.

    The problem is that a lot of places are not in compliance with NIST standards.

    I know, I've helped patch them.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 years ago* (2 children)

    Yep, but we've got at least a decade to do it, and when new systems are stood up they "should" be in compliance.

  • source
  • parent
  • hideshow 2 child comments