PL charge City for alleged breaches of financial rules

[BerkshireBlue]

There is a problem with having ‘secure’ passwords. We have a system where the password has to be changed every three months and it must contain the usual mix of alphabetical characters plus numbers and symbols. For a time you couldn’t use more than a few characters from your previous password.

My roommate couldn’t cope with all this and even if he changed his password he couldn’t remember what he had changed it to. Once he was off sick and hadn’t posted details for an assignment and students came in complaining to me. I sorted things out by lifting up his keyboard and finding the ‘post-it’ note with his password written down stuck underneath. I duly hacked into his account and posted the information needed.

That system goes against the new best guidance rules for password creation. You need a new system. Changing passwords every 3 months makes the whole password weaker due to human behaviour like you've mentioned.

 

[Gordyola]

It still puzzles me why we didn't go to the police over this, as it was a clear criminal offence under the Computer Misuse Act.

Is it not an offense to not report criminal activity?

The database concerned was an external supplied one which City paid to access I would imagine that City had no control over password protocol which was probably quite weak at the time. They may have even shared a common password to save logging in an out at the time, certainly not unusual in lots of organizations in the past

 

[BerkshireBlue]

one little thing i find weird is that passwords can go that long without being changed. thats naughty by rob newman imo but it may well have been commonplace at city back then

It's against best practices to change your passwords. What was missing from city by the sound of it was the implementation of 2FA and SSO

 

[crystal_mais]

I have been in IT my entire career, working at billion dollar companies and in our most recent round of phishing training. The head of IT security got caught out.

Shit happens, nothing is infallible.

I have been working in Cyber for over 12 years now across numerous large companies. You can push as much training etc through as possible, but you can't plan for human error.

From what i was told, the Pinto hack was via a Phishing email and as discussed here the scouting DB was via a password being used. I think if the guy had shared his password with a colleague that is wrong but if someone guessed a password, then that's a different scenario.

As you said shit happens, we have an over reliance on technology but that also means we have far more doors to keep locked.

 

[KS55]

I have been working in Cyber for over 12 years now across numerous large companies. You can push as much training etc through as possible, but you can't plan for human error.

From what i was told, the Pinto hack was via a Phishing email and as discussed here the scouting DB was via a password being used. I think if the guy had shared his password with a colleague that is wrong but if someone guessed a password, then that's a different scenario.

As you said shit happens, we have an over reliance on technology but that also means we have far more doors to keep locked.

The Chinese gov has recently hacked Trump and several other senior personnel. US gov staff are forbidden to have the Tik Tok app on their phones.It is very hard to stop a determined hacker.

 

[mancboy]

The Chinese gov has recently hacked Trump and several other senior personnel. US gov staff are forbidden to have the Tik Tok app on their phones.It is very hard to stop a determined hacker.

with the advent of supercomputers and increased processing power passwords have become effectively for your peace of mind than stopping a hacker, if they want to brute force their way in then they will.

 

[eike]

It’s what makes me laugh when people say what’s happening to City wouldn’t happen outside football. It’s exactly what happens outside football.

For instance what the Glazers did is pretty much what happened to all of UKs asset

It’s what makes me laugh when people say what’s happening to City wouldn’t happen outside football. It’s exactly what happens outside football.

For instance what the Glazers did is pretty much what happened to all of UKs assets.

Earlier in the film Dave gets taken to court on a technicality (actually done nothing wrong) but if charged he won't be able to get the bankers licence.All this came from the banking cartel to stop him, it really mirrors our situation.

 

[cheekybids]

Earlier in the film Dave gets taken to court on a technicality (actually done nothing wrong) but if charged he won't be able to get the bankers licence.All this came from the banking cartel to stop him, it really mirrors our situation.

I thought the attitudes of the banks matched our situation, they think they are a class above.

 

[BamberBridgeBlue]

The Chinese gov has recently hacked Trump and several other senior personnel. US gov staff are forbidden to have the Tik Tok app on their phones.It is very hard to stop a determined hacker.

I had a Huawei Smart Watch. President Xi Ping called me to warn me about my blood pressure. Lovely chap.

 

[hammocity]

Watched a good film yesterday (Bank of Dave) it's about a business man in Burnley who wants to start up a new bank for the people of Burnley with profits going to local charities. To get it started he has to apply to the bank regulators but Dave's problem is that it's a closed shop and it's been over a century since a new bank has been accepted ( they don't want any Johnny come latelys taking a slice of the pie) There is a scene in the film where some of the major bankers (red cartel) are sat in the boardroom debating over how to stop Dave and this guy
(Masters) pipes up and says yes let him join our group, the cartel can't believe this but he explains that as we make up all the rules we can make it impossible for him as he won't be able to comply with our bullshit.
It was like watching us against the cartel/pm mafia

Very good film, there's a second one out this year, my mate drives actors to sets, he did that one. He's on the new series of Brassic starting today.

You're right about the analogy with the PL but Dave was so determined even though he had to raise £12m which originally was beyond him, shows what you can do.