seriously, FFS these are guidelines that we use for not-remotely-that-sensitive-data and equifax that literally...
"You had one job to do, protect our data"
Can't follow?
This is just business being
a) ignorant
b) incompetent
c) careless
one or more of the above applied for a hack like this to happen.
It's really sad that even ycombinator crowd doesn't get it, given that the crowd here is significantly more technical and sensitive to these issues than the average Equifax Joe..
No, we get cases A, B, and C, because those cases are really easy for anyone to understand. What you're missing is that some of the "ycombinator crowd" have worked with enough "average Equifax Joes" enough to know that the problems faced by "Equifax Joe" are not always solvable by merely being knowledgeable, competent, and careful.
This is just business being a) ignorant b) incompetent c) careless one or more of the above applied for a hack like this to happen. It's really sad that even ycombinator crowd doesn't get it, given that the crowd here is significantly more technical and sensitive to these issues than the average Equifax Joe..