Posts by Tom Beard
Last ←Newer Page 1 2 3 4 5 Older→ First
-
OnPoint: The Source, in reply to merc,
I hear what you're saying but I can't answer. You're logic is irrefutable but I cannot understand why you say that.
And so on but your understanding may be at odds with mine.This bar doesn't have any bourbon but it does make a very nice Martini. My apartment is small, but it's close to Cuba St. Ooh, you are awful, but I like you.
It doesn't negate the first statement, but it may negate a judgement that might be expected based on it.
-
OnPoint: The Source, in reply to Emma Hart,
Reads to me like, "You might very well think that; I couldn't possibly comment."
F.U.
-
OnPoint: The Source, in reply to merc,
Take from it what you will, I saw a backhanded smear running against the flow of her first comments...remember "but" negates everything before it. This person is dangerously close to dissociative.
She ain't saying he's no golddigger...
-
OnPoint: The Source, in reply to merc,
She said Mr Bailey and Ng had ultimately done the department a favour.
"I feel no ill-feeling towards any of them. -
OnPoint: MSD's Leaky Servers, in reply to Karen Adams,
Do you know whether the line is still saying that? It would be good to have a transcript to see whether they're giving unsubstantiated reassurances, or whether they have enough weasel words to get them out of it.
-
OnPoint: MSD's Leaky Servers, in reply to Karen Adams,
how can MSD say conclusively that my file hasn't been accessed? They can't.
The CEO's just said on live TV that they can't guarantee that other people haven't accessed the same info Keith did. Not sure what the 0800 message says, but might there be a contradiction?
-
OnPoint: MSD's Leaky Servers, in reply to Lea Barker,
development was moved to low cost centres in Pune, India and Tallin, Estonia. The 7.2 release of SMP will be delivered by these new teams."
I'm sorry, Estonia? Isn't that almost the beating heart of cybercrime?Are you sure it wasn't Elbonia?
-
OnPoint: MSD's Leaky Servers, in reply to Russell Clarke,
I'm picking they don't just work using files - they'll have a case management system that has its own database, and probably does have some level of access logging going on. So while they're probably dissembling about security in general, they might be more assured about the case records in the system.
That seems to be the case, and if there's one thing that's reassuring, it's that the really sensitive information seems to have only been visible in a fairly ad hoc and incidental way, through things like invoices rather than a case database. If someone went to a kiosk with the intent of maliciously accessing a specific person's information, it wouldn't have been as easy as typing a name into a search box (I think). However, someone with a more generic grudge could have released it out of spite or found someone to blackmail, or even sold the data. Not that anyone would do that.
Karen, I'm not sure if that really helps :-(
-
OnPoint: MSD's Leaky Servers, in reply to Karen Adams,
I've spent the morning going mental. Where the hell is any info on this?
MSD is saying via the 0800 line that no clients have had their privacy breached. This doesn't mean anything because on Friday they would have assured us that no CYFS clients would have had their privacy breached.I'm not an expert, but from Keith's description I don't think they would have any way of knowing for sure. It's possible that they were logging all activity on every kiosk, but given the evident amateurishness of their setup I'd very much doubt that. Maybe they have central logging of every file access, so they'd know if any other files had been accessed from any other kiosks: that seems like the only way they'd be able to update their 0800 lines so quickly to reassure people.
Otherwise, while they could rely on Keith's word as a responsible journalist and all-around good guy not to have distributed the data the accessed, I doubt they could be sure that someone hadn't been in the day before and done the same thing with less public-spirited purpose.
Can anyone more qualified comment on how likely it is that they could make this assurance?
-
Has anyone weighed in on whether this was due to kiosks with Admin privileges, or an MSD-wide problem where any employee could look anywhere on the network? It's presumably easy for someone at MSD to check, and I'm sure an anonymous word in Keith's ear wouldn't go amiss
