[AusNOG] Optus Hack

[glenn.satchell at uniq.com.au]

My understanding was that the data included the 100 points of ID info. 
Why are they retaining this? Surely after confirming the 100 points 
there only needs to be a record "100 points provided"=true and not 
retain the actual details. This goes back to only keeping the private 
data you need.

regards,
Glenn

On 2022-09-27 10:49, Damien Gardner Jnr wrote:
> Personally, I find putting Authentication on my API endpoints to be a
> FANTASTIC first step towards API security.  And then not even using
> public IP addresses in test environments is a pretty good second
> step..  </onlyhalfsarcasticherewhydoesthiskeephappening>
> 
> On Tue, 27 Sept 2022 at 10:46, Bevan Slattery <bevan at slattery.net.au>
> wrote:
> 
>> Hi everyone,
>> 
>> Obviously a big week in telco and cybersecurity.  As part of my work
>> I am on the Australian Cyber Security Industry Advisory Committee as
>> an industry representative.
>> 
>> I am keen to look at opening up a dialogue with more and more telco,
>> DC and Cloud CISO’s on what they are doing around this issue and
>> looking to take a proactive step towards best practice on customer
>> data and system security.
>> 
>> There will be some pretty serious consequences of this hack on the
>> industry and importantly we need to make sure we are as best placed
>> to help each other continually increase in security posture through
>> best practice, but also working with each other as an industry.
>> 
>> Are people keen on having a online/VC session sometime in the next
>> few weeks where like-minded industry participants get together and
>> discuss security, retention, encryption, threat detection etc.?  If
>> so, just ping me directly and if there is enough interest I will
>> send out an invitation to the list for a call.
>> 
>> Cheers
>> 
>> [b]
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at ausnog.net
>> https://lists.ausnog.net/mailman/listinfo/ausnog
> 
> --
> 
> Damien Gardner Jnr
> VK2TDG. Dip EE. GradIEAust
> rendrag at rendrag.net -  http://www.rendrag.net/
> --
> We rode on the winds of the rising storm,
>  We ran to the sounds of thunder.
> We danced among the lightning bolts,
>  and tore the world asunder
> _______________________________________________
> AusNOG mailing list
> AusNOG at ausnog.net
> https://lists.ausnog.net/mailman/listinfo/ausnog