Windows 7: RSA comes clean, SecurID is compromised

Maguscreed · 08 Jun 2011

It took them long enough.

Quote:

RSA Security will replace virtually every one of the 40 million SecurID tokens currently in use as a result of the hacking attack the company disclosed back in March. The EMC subsidiary issued a letter to customers acknowledging that SecurID failed to protect defense contractor Lockheed Martin, which last month reported a hack attempt.
SecurID tokens are used in two-factor authentication systems. Each user account is linked to a token, and each token generates a pseudo-random number that changes periodically, typically every 30 or 60 seconds. To log in, the user enters a username, password, and the number shown on their token. The authentication server knows what number a particular token should be showing, and so uses this number to prove that the user is in possession of their token.

RSA finally comes clean: SecurID is compromised

FliGi7 · 08 Jun 2011

The media has no clue what information was relayed to defense contractors about the compromise, I can assure you. Good scaremongering article, though.

Maguscreed · 08 Jun 2011

Well the fact remains they were compromised. As to the level it's kind of a moot point.

FliGi7 · 08 Jun 2011

That they were.

fseal · 08 Jun 2011

Things like this are so disheartning.

If you can't trust security companies to not get hacked, what hope is there for anyone, big, small, company or individual?

Laziness and stupidity are rampant desieses, even among the very people that should be niether and that you place your trust in. They take your money and they provide.... nothing at all? Worse, a false sence of security. And we are about to embark on a major foray into trusting the internet 10 times as much as we ever have with this cloud computing stuff.

Still waiting for the day when people "Get it togeather". Will probably die waiting...

Maguscreed · 08 Jun 2011

Well there is no unhackable system.
You would think a entity like this would be actively monitoring things with real live people instead of just software though. A living person can always cut the physical connection.
...and that's the only thing you can do in some instances.

Quote: Originally Posted by Airbot

There will come a day when you can't "not" use it and still have access to the internet like you do today.

Then I will miss the internet when that day comes.
I'll join it when I decide I'm comfortable taking my morning showers in my front yard.

seekermeister · 08 Jun 2011

Quote: Originally Posted by fseal

Things like this are so disheartning.

If you can't trust security companies to not get hacked, what hope is there for anyone, big, small, company or individual?

Laziness and stupidity are rampant desieses, even among the very people that should be niether and that you place your trust in. They take your money and they provide.... nothing at all? Worse, a false sence of security. And we are about to embark on a major foray into trusting the internet 10 times as much as we ever have with this cloud computing stuff.

Still waiting for the day when people "Get it togeather". Will probably die waiting...

The obvious solution to Cloud is not to use it.

Airbot · 08 Jun 2011

There will come a day when you can't "not" use it and still have access to the internet like you do today.

Maguscreed · 08 Jun 2011

I've never understood the logic behind cloud computing. Though honestly I've personally had a large enough interest in it to delve in far enough to gain a deep understanding. I see it making sense on some level in a mostly closed internal network. The way they are talking about implementing it though. I honestly don't see it ever gaining popularity.

Perhaps in some sort of futuristic public terminal kind of capacity just for general information reasons. I just never see it as being viable for even most business and definitely not for home use though.

seekermeister · 08 Jun 2011

Quote: Originally Posted by Airbot

There will come a day when you can't "not" use it and still have access to the internet like you do today.

If that is so, then I will either take what ever kind of access that I can get without Cloud, or I will abandon the internet altogether. Since that might mean not being able to access apps and updates that would be needed, it could mean giving up the computer altogether.

Cloud will never cast it's shadow over me, I have my own light to walk by.

Windows 7: RSA comes clean, SecurID is compromised

RSA comes clean, SecurID is compromised problems?