PL charge City for alleged breaches of financial rules

[EricBrooksGhost]

Password protection on its own is archaic. Any organisation serious about IT security will have VPNs all over, and every employee will have a physical token, bit like a USB stick. No token, no access, go home. Lose your token it gets disabled for ever, you have to beg IT for a replacement. When an employee leaves the company access via their token is auto disabled, the employee should hand it on last day, but even if they don't the token is disabled for ever. Also on the last day of employment all passwords should be disabled for ever. Allowing the dippers access to our scouting network after they left was just negligence by us.

Never said you don't remove creds/disable access to people who leave so not sure what the point is.
Also I don't disagree on password only based access.I said if they used an existing user's credentials removing the creds of the person who left may be irrelevant because we don't know technically how the system was accessed such as VPN or another approach. We don't know enough about the system in question e.g. was it SaaS based run by a 3rd party accessible from anywhere? So we should avoid assumptions.

 

[give it to gordon]

True so far , the 115/130 is becouse we are growing so fast if we want to continue to be succsessfull and one of the big guys we have to clear out name we have to start using PR , we have to fight back ir we will loose .

Our name will never be cleared regardless of the out come. I think you are giving the British press/media to much credit for the power you think they hold

 

[halfcenturyup]

In this case it was still very bad security procedures. Makes you think how and where these credentials landed at Liverpool. And as alreay has been mentioned MFA should have been put in place, maybe ip-restrictions for logins, user alerting for abormal logins. Standard procedure in more security mature organizations.

No expert in computer security but it seems to me that, any way you look at it, the security protocols in place must have been dreadful in 2012 and 2018. Password protection is one of the most basic security procedures around. Weren't the employees sharing passwords in 2010/11 and it took a year or so to identify the wrongful access? As for email attachments, surely they should have been scanned by an anti-virus software before being made available to employees? Pretty sure we were doing that when I had a corporate account. Any risk and the attachment wasn't delivered. And that was well before 2018 ....

Interested in the views of any professionals on here.

 

[wolviedinho]

Khaldoon needs to create his own media operation.

Paper
Tv
Report it on the socials.

Soon enough the information would get balanced against the legacy media.

On all seriousness, we need to be spreading our innocence on the socials. The rest no one cares about anymore.

 

[chocovla]

No expert in computer security but it seems to me that, any way you look at it, the security protocols in place must have been dreadful in 2012 and 2018. Password protection is one of the most basic security procedures around. Weren't the employees sharing passwords in 2010/11 and it took a year or so to identify the wrongful access? As for email attachments, surely they should have been scanned by an anti-virus software before being made available to employees? Pretty sure we were doing that when I had a corporate account. Any risk and the attachment wasn't delivered. And that was well before 2018 ....

Interested in the views of any professionals on here.

You'd be surprised how a lot of companies and government agencies still operate ;-) It has gotten better in the last 5 years, also in part due to more stringent GDPR rules. In the past I've even had to block access to several systems because I noticed one of our contractors using 1 account for all their employees. Every day it's a real slug to convince people to follow more secure procedures and techniques, but it's often seen as overzealous and inconvenient, or this will never happen so we won't implement this. It does still keep me in a job as a security officer mind :-)

 

[Silva61]

yes I do.

I dont have to explaine the way City are talked about in the UK it is the same in Iceland and scandanavia only worse.

There are football trips advarted all the time , games at Old Trafford, Anfield ,Arsenal, Tottenham even Fulham very few times have I seen add for a City game.

If you go into Sport Direct there are no City shirts only behind all the others, I have even moved the City Shirts to the front , the next day they are gone.

There are many on here who are relax about this. But we have been winning everything so I thing that has forced people to talke about litle City that will not be forever .
You are very naive if you think that PR doesnt matter, without that United and Liverpool would be nothing today.

Didn't City do a recent trophy tour in Iceland and CFG showing an interest in purchasing a club there and those City shirts in sports direct may have been sold.

 

[Cityfan1977]

Khaldoon needs to create his own media operation.

Paper
Tv
Report it on the socials.

Soon enough the information would get balanced against the legacy media.

On all seriousness, we need to be spreading our innocence on the socials. The rest no one cares about anymore.

boom there you go thats what I am talking about

 

[Prestwich_Blue]

Which really baffles me. Therefore I think it was part of settlement. In my line of work it's normal operating procedure to always contact the local cybercrime units to report this sort of thing. Even attempted hacks are reported.

I can only assume the PL pressed us to settle quietly and we agreed. There is a PL rule I think that disputes must be settled between the parties without external involvement but I don't see how that applies to criminal offences. Perhaps, as someone said above, we naively believed it would help us in some way. Perhaps the quid pro quo was that the PL wouldn't take any action over our issues with UEFA over our initial FFP assessment.

Perhaps we even reported it to Merseyside Police! ;-)

 

[Cityfan1977]

Didn't City do a recent trophy tour in Iceland and CFG showing an interest in purchasing a club there and those City shirts in sports direct may have been sold.

True they did it was very soon forgotten

 

[ancoats]

We were also bigger than that rabble in the 1920s and 30s. Most of their "history" stops at WW2.

Your right,
but that period in the mid-60s to late 70s was the last period we could match up to the rest

Manchester City is steeped in history and stands up to most, But the Swales years at City and being run as a joke club for 40 years was right bang in the United and Skys Premier league years