Technicians working on a firewall upgrade made at least ten mistakes, contributing to two deaths, according to a report on a September incident that saw Australian telco Optus unable to route calls to emergency services.
Technicians working on a firewall upgrade made at least ten mistakes, contributing to two deaths, according to a report on a September incident that saw Australian telco Optus unable to route calls to emergency services.
I know exactly want I am talking about. What happened to Optus happens to me all the time when developing custom software for Australian businesses. Sys-admin is all outsourced to a huge Indian conglomerates who have no clear idea about the scope of the network and no incentive to know it. Consistently claim a ticket is completed when it has not been and repeat 5-6 times before they blame the software, repeat until I have a full Phd thesis of evidence demonstrating it is a sys-admin issue.
In the end it is all security theater because I write the software and could screw up the whole business if I wanted to be malicious.
Which is why there is the general rule of zero trust in networks. You start with nothing and you need to prove why you need a hole poked in the firewall. Some IT departments are better at actioning those requests than others. You clearly have had the joy of working with IT departments that are on the worse end of the scale.
Exactly. Hence I started with the trillion dollar mistake comment, it costs a truck load of money to get any changes for development with no security benefit in this context. I could feed businesses bad data and no network dictatorship can stop that.