Security Leftovers
-
iTWire - Government should also share blame for Optus fiasco: Budde
Well-known independent telecommunications consultant Paul Budde says while Optus has bear a lion's share of the blame for the recent massive data breach, the government was not totally off the hook.
"As with so many policies there has been a serious lack of vision from the government and therefore also no clear strategy attached to it," he told iTWire on Tuesday. "There are a dozen or so initiatives that are not aligned and sometimes conflicting with each other."
Optus announced the breach on 22 September. However, only last evening did the company specify the numbers affected, with a total of 2.1 million taking a hit.
-
NSA Employee Charged with Espionage [Ed: FBI sting operations to create more Russophobia?]
An ex-NSA employee has been charged with trying to sell classified data to the Russians (but instead actually talking to an undercover FBI agent).
It’s a weird story, and the FBI affidavit raises more questions than it answers. The employee only worked for the NSA for three weeks—which is weird in itself. I can’t figure out how he linked up with the undercover FBI agent.
-
iTWire - Telstra gets in on data leak action, staff data posted online
Telstra has reported a data breach, with the names and addresses of 30,000 current and former staff being posted online.
Australia's biggest telco was in a rush to play down the leak, saying on LinkedIn that this was not due to a breach of any Telstra system.
It appears the data was filched from workforce management software company, Pegasus, which was providing a rewards program for Telstra staff.
-
Security updates for Tuesday [LWN.net]
Security updates have been issued by Debian (barbican), Fedora (libdxfrw, librecad, and python-oauthlib), Oracle (bind), Red Hat (bind and rh-python38-python), SUSE (bind, chromium, colord, libcroco, libgit2, lighttpd, nodejs12, python, python3, slurm, slurm_20_02, and webkit2gtk3), and Ubuntu (linux-azure, python-django, strongswan, and wayland).