OT: Target got got (de facto Bad Cyber Stuff thread)

[forty_three]

I've never used Bitwarden but I hear good things about it. The thing that worries me about it and LastPass is their "ease of use" cloud integration. The "cloud" is just someone else's computer that you don't control the security of. I do like that BitWarden (at least claims to) has a zero knowledge model, so they can't see anything about your password database. So, assuming you have a super strong master password, you should be fine if (when) they get breached and your password DB is stolen.

I use KeePass. It's an offline db, so it feels a little more controllable to me. It's not user friendly, but that doesn't bother me. My main database is on a file share on my network only me and my wife have access to. I keep a copy on my google drive and have my Android app only open on my fingerprint. I then point that to the Google Drive where it connects to the database copy on the G drive which has a phrase as the password should I ever need to access it remotely, which is rare. So if someone gets my phone, they would need my thumb and my passphrase. Even if my G drive got breached they'd still need the passphrase, which is currently like 40 characters.

 

[dare2be]

Ticketmaster data breach: 500 million customers’ information stolen

The data taken was identifying information, including credit card numbers, emails, addresses, phone numbers and ticket purchases.

www.wpxi.com

But the company said it doesn’t think that the hack had “a material impact on our overall business operations or on our financial condition or results of operations” and it expects that it won’t have an impact in the future.

Of course it won't, because they don't care about their "customers" feeding their monopoly.

 

[forty_three]

^When dealing with the criminal underworld it is even harder to discern who is being truthful and who is trolling, but someone reporter earlier today that the breach came from an admin account with the password Spring2019@

 

[forty_three]

What a shitty company.

https://www.cnn.com/2024/07/12/business/att-customers-massive-breach?cid=ios_app

Seriously, if you have any AT&T services, stop.

Not like it will matter all that much. I haven't been a customer in forever and their last breach included my data.

 

[sbb122]

Microsoft and cyber strike must’ve thought I needed a day off today lol

 

[Comeds]

Microsoft and cyber strike must’ve thought I needed a day off today lol

CrowdStrike issues?

 

[sbb122]

CrowdStrike issues?

Yep most of our systems we use are inaccessible or crash upon launch

No clue where I got cyberstrike from lol

 

[Comeds]

Yep most of our systems we use are inaccessible or crash upon launch

Same here, fun morning

 

[Bloody Brian Burke]

Couldn’t they have fucked Outlook at least?

 

[puckhead]

 

[buffhockey]

 

[Bloody Brian Burke]

Feel like someone could've gotten in a car and driven this, especially if the issue became known during the overnight.

 

[forty_three]

Looks like I picked a good time for a vacation.

A vacation is an alibi, right?

 

[buffhockey]

In other news today -

 

[dare2be]

Overlay video of bug spray being applied.

 

[forty_three]

I HAVE AN ALIBI

 

[dare2be]

I HAVE AN ALIBI

How can you be arrested when you had a hand in the investigation?

 

[mattola]

so a major airline (delta I think) is suing Crowdstrike for loss of revenue due to the downtime...

is there a way we can ALL sue the airlines for their issues when we get affected by their incompetency? would a class action from millions of passengers against the airlines even be remotely successful?

 

[Stakesarehigh]

so a major airline (delta I think) is suing Crowdstrike for loss of revenue due to the downtime...

is there a way we can ALL sue the airlines for their issues when we get affected by their incompetency? would a class action from millions of passengers against the airlines even be remotely successful?

Was curious if this would occur.

 

[forty_three]

Couldn’t they have fucked Outlook at least?

Took a while, but you got your wish.

Microsoft M365 services are down all over, especially Teams and Outlook cloud services. Which again proves that it's always a great idea to let someone else have complete control over your organization's ability to communicate.