Inside the Russian hack of Yahoo: How they did it

[Chiefcrowe]

http://www.pcworld.com/article/3181487/hacking/inside-the-russian-hack-of-yahoo-how-they-did-it.html

 

[John Connor]

The vector is always E-mail. Companies need better sandboxing or something with E-mail as this is a major vector often used by intruders.

 

[TheRyuu]

The vector is always E-mail. Companies need better sandboxing or something with E-mail as this is a major vector often used by intruders.

It goes further than this. You have to make fundamental changes to how things like email is used such as making rules that say nothing will ever be sent through attachments.

 

[John Connor]

I.e a sandboxed environment.

 

[TheRyuu]

I.e a sandboxed environment.

As I said I'm not sure it's that simple. There are other cultural changes that have to accompany any changes in software.

 

[John Connor]

Asking employees to be more careful is like asking McDonalds not to screw your order up.

 

[Rifter]

Asking employees to be more careful is like asking McDonalds not to screw your order up.

Exactly, anyone who has worked in IT knows this. People are dumb, period. People will do dumb things, period.

Only thing you can do is put systems in place to quickly fix any dumb things people do. And to try to eliminate as much damage as possible.

 

[corkyg]

Having worked in that area years ago, I agree that many users do dumb things, but not necessarily because they are dumb. In many such cases that I investigated, they were either ignorant or they simply did not care.

 

[Elixer]

I.e a sandboxed environment.

As was shown in the other thread, a sandboxed environment can be compromised as well.

 

[sttubs]

My Avast keeps signaling "Threat Detected" on Yahoo right now. Scans show nothing though. False Positive?