Honestly they were asking for it. Kudos to whomever hacked them and took the high road.
Are there any security firms that actually know what they're doing? I'm beginning to think there isn't.
Are there any security firms that actually know what they're doing? I'm beginning to think there isn't.
I think the takeaway is that knowing what you're doing is less then half the battle here.
Just as most people know how to lose weight (diet and exercise), actually making those lifestyle changes can be very difficult. Similarly businesses, even security companies, let their security lapse because it's hard to take the time, effort and focus away from products, sales, cash to set up proper standards and controls.
Shouldn't they be able to prove their own concepts internally?
If you've got a handful of employees and your expertise is DDOS protection then are you going to use your next hire on a DDOS specialist to work on your DDOS protection product or bring in someone to make your website safer?
It was LulzSec. They've been attacking a number of security firms, lately.