Timeline for Getting an employer to secure their website immediately
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 17, 2017 at 13:14 | history | edited | CommunityBot |
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
|
|
| Apr 15, 2016 at 10:35 | vote | accept | Emily L. | ||
| Mar 15, 2016 at 15:11 | comment | added | i-CONICA | Lots of people use the same passwords for multiple things. Also, the wireless network can be secure, but employees have access, and so there's the vulnerability. | |
| Apr 14, 2014 at 10:13 | comment | added | SilverlightFox |
The two parts of your question that are not explained are pray that no one empties your paypal account and park my cellphone on wifi outside their office with wireshark running to grab the credentials of most people in the office. Is their site integrated with PayPal? Also, is your employee network an open Wifi hotspot - this seems like a vulnerability in itself.
|
|
| Apr 14, 2014 at 8:21 | history | edited | CodesInChaos | CC BY-SA 3.0 |
deleted 12 characters in body
|
| Apr 14, 2014 at 1:31 | comment | added | Matt | If a Pentest recently found it, chances are they'll fix it. If they didn't care about security or compliance they wouldn't have commissioned a pentest, and they won't pass important business checkpoints like PCI compliance if they have bugs like this outstanding on their internal or external infrastructure. If they have a security team, let them get on with their job. | |
| Apr 13, 2014 at 13:51 | answer | added | mohrphium | timeline score: 3 | |
| Apr 13, 2014 at 11:26 | comment | added | Philipp | It is impossible to get anyone to do something immediately in a large organization. Any IT infrastructur change needs to pass the review boards to make an assessment of possible business impact.You did the right thing. The rest is no longer in your hand. | |
| Apr 13, 2014 at 11:11 | comment | added | Deer Hunter | An immediate response is not likely. Patience is required, methinks. | |
| Apr 13, 2014 at 10:27 | review | First posts | |||
| Apr 13, 2014 at 10:56 | |||||
| Apr 13, 2014 at 10:08 | history | asked | Emily L. | CC BY-SA 3.0 |