298
Anyone who ordered Steam hardware in the last ~3 months in Europe just had their names, address, phone number and email stolen (sh.itjust.works)
submitted 3 months ago by to c/steam@lemmy.ml
52 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 3 months ago (8 children)

Can you imagine a company like CEVA making millions upon millions of dollars year over year and not spending any of that for security?

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 49 points 3 months ago (5 children)

    Who says they don't spend any of that for security? Security is not reached by just throwing with money. We don't know the details how this happened. So I would be careful with premature conclusions like that.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 3 months ago (1 child)

    it was eight warehouses - and warehousing/ middle mile logistics is very fraught with give and take

    we don't know what happened but freightwaves is reporting it was at the warehouse level so I'm guessing it was at the consolidation/LTL stage - meaning it was warehousing that has recieved the inventory and is working out how and where to get it to the address

    knowing they run a proprietary blend of cargowise freight tech it's likely the hackers got access to a regional managers account, probably pretty low on the totem pole

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [+] -10 points 3 months ago (2 children)

    Ok, "spending a fraction of it on piss poor security."

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 28 points 3 months ago (1 child)

    You still don't know how much they spend and how the attack was done. Often security isn't even a matter of money, but knowledge and trust of your own teammates. Maybe you are right after all, but my point is, we don't know YET.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 3 months ago

    Exactly. It only takes one printed picking list not shredded correctly and some asshole dumpster diving and there it goes. Or a wrongly formatted mail recipient… so many ways for humans to fail it’s funny to always see security reduced to technical measures.

  • permalink
  • fedilink
  • source
  • parent