Bad week

Posted Sep 1, 2011 2:39 UTC (Thu) by cesarb (subscriber, #6266)
Parent article: kernel.org compromised

This has been a bad week.

First Apache, then DigiNotar, now kernel.org...

to post comments

Bad week

Posted Sep 1, 2011 5:07 UTC (Thu) by jcm (subscriber, #18262) [Link] (2 responses)

I think the takeaway is if you're a big entity you're going to get cracked sooner or later, and the best thing to do is just accept that and move on.

Bad week

Posted Sep 1, 2011 5:45 UTC (Thu) by Cato (guest, #7643) [Link]

I agree with the first part, but big organisations need to spend more time/money on continuous monitoring and intrusion detection rather than just "accept it and move on".

Bad week

Posted Sep 1, 2011 17:26 UTC (Thu) by rgmoore (✭ supporter ✭, #75) [Link]

I think you mean "design a response plan in advance" rather than "move on". The time to plan for a security breach- or any kind of nearly inevitable disaster- is when it's still a possibility rather than an actual event. Any big target like kernel.org that doesn't have a plan to do when they're cracked is being irresponsible.