How do hackers get passwords? Sometimes, they just ask.

Massive 2023 hack was easily preventable, Clorox says.

See full article...

 

[Derecho Imminent]

Sounds like they provided the very best customer service to the caller.
/s

 

[Derecho Imminent]

Kind of makes me feel uncomfortable. I vaguely remember having to call someone to get a password reset and being relieved that it was done so easily. Maybe it should have been a red flag though.

 

[Derecho Imminent]

This is so simple. It's your bridge. If you outsource to a guy who makes the rivets, it's still your bridge. If he gets the rivets wrong, you're the one responsible for whether the bridge falls because it's your bridge. It doesn't matter what the fuck your contract looked like, it's still your bridge. So you better put systems in place to make sure he does it right.

This is not a bridge that hurt individual citizens when it failed. The only one that was hurt was Clorox itself. Your comment is like blaming the homeowner for a burglary because the front door locks they bought werent good enough.

edit: or like blaming the homeowner because the lock company started handing out keys.

 

[Derecho Imminent]

Say what you want about outsourcing but the fact that Cognizant literally just gave them the passwords is like some next level incompetence. Hope the contract was cheap because you certainly got what you paid for.

They are suing because they literally did not get what they paid for.

 

[Derecho Imminent]

You're oversimplifying it. Clorox is responsible to their customers, and Cognizant is responsible to theirs. They both failed.

I dont see that Clorox failed their customers though. Can you explain how you think that?

 

[Derecho Imminent]

If Cognizant is found liable (which I do believe they will be) then Clorox will surely be able to collect. Cognizant has a $37B market value. They can afford it.

 

[Derecho Imminent]

The tow guy is at fault for his error. You are still ultimately responsible, however, for making sure you have a working car that takes care of your needs.

Typically the tow company will pay all damages and your insurance will provide a car while your car is in the shop (and bill the tow company for it). So really the responsibility is theirs.

And in the case of Clorox, in the same way, Cognizant will pay all damages. 100%

 

[Derecho Imminent]

I agree with you.
There is nothing wrong with outsourcing. Most companies outsource some capacity. Clorox only failed to audit their outsourcers to ensure compliance with Clorox's policies, processes, and procedures.

In the retail world, these auditors are known as "secret shoppers." All Clorox needed to do was call the helpdesk on a regular basis and have a 5-minute conversation, asking the typical questions a user would call for, and compare the answers to what was expected. That's where Clorox and most companies fail. They don't properly follow up and routinely audit their outsourcers and vendors.

This is where Clorox failed big time.

Is it really necessary to post basically the same text 6x in a row?