you are viewing a single comment's thread
view the rest of the comments
[–] 25 points 1 week ago (8 children)

It's entirely possible that the geniuses in charge of DHS had a totally insecure master admin password and security policy that allowed access to Okta management. The front door lock can still be called "secure" if the owner just left the back door open.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 5 points 1 week ago* (2 children)

    So someone with a master password was phished. That doesn't really make it insecure. Someone had admin rights and they were stupid enough to be phished.

    You can't fix stupid

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 1 week ago

    You can’t fix stupid, but you can build systems to help mitigate it. Rate limiting, alarms/pattern monitoring etc. unsurprisingly the fascists are too stupid to do any of that, even with their infinite corrupt budget.

  • source
  • parent