Linked by HAL2001 on Sun 20th Mar 2011 08:57 UTC
Privacy, Security, Encryption RSA suffered a breach and data loss following an "extremely sophisticated cyber attack." Their investigation revealed that the information extracted from the company systems is related to its SecurID two-factor authentication products. The news of the incident spread through the community like wildfire and information security professionals are offering their take on this incident. We still don't know the technical details, but it's certain that RSA's brand has taken a big hit.
Permalink for comment 467005
To read all comments associated with this story, please click here.
Levelling the playing field
by umccullough on Sun 20th Mar 2011 15:55 UTC
Member since:

Worst case, whatever had been "stolen" from RSA as a result of the breach can't be any worse than if one had used an Open Source solution in the first place.

The "security through obscurity" that RSA has enjoyed could be gone now, but we will never know - unless the contents retrieved during the attack are leaked to the public somehow (hard to imagine).

I don't know much about SecurID (other than the fact that I have a couple of those tokens in my drawer at work for access to customer systems), but I would hope the entire system is open-spec such that it has been audited by the greater security community for potential flaws.

I would imagine that getting your hands on the client/server source code for the SecurID system would be a boon for criminals in order to analyze and discover potential flaws in the software.

Reply Score: 2