Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Trustwave sued with Target over data breach (chicagobusiness.com)
3 points by wglb on March 25, 2014 | hide | past | favorite | 1 comment


From the actual complaint:

As early as 2007, Dr. Neal Krawetz of Hacker Factor Solutions published a white paper entitled "Point-of-Sale Vulnerabilities" (the "White Paper"). According to the White Paper, POS systems "provide virtually no security" and few POS systems "implement best practices for handling sensitive information, such as the Visa standards for credit card management."6

and

Thereafter, at least 17 copies of the White Paper were downloaded to a domain owned by Target, the most recent download occurring in May 2013. Target personnel used the search term "POS vulnerability" to locate and download the White Paper. As is now apparent, Target did not heed the White Paper or implement its suggestions.

[edit] link to the Dr. Krawetz paper: http://www.hackerfactor.com/papers/cc-pos-20.pdf




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: