Arkansas cops send malware to whistleblowers' lawyers

[shaddack]

@AcerPlatanoides

Might also be that you hold them in such disdain that my treating them as human seems like a fucking halo.

You never did techsupport, didn’t you?

[Medievalist]

@Michael_R_Smith

It could be something as simple as police browsing porn on work systems.

[davide405]

@dragonfrog

A USB disk ending up with malware after being plugged into a bunch of computers used by bored office workers, at a workplace whose list of priorities probably has “highly reliable IT environment” somewhere around item 200, is hardly shocking.
{emphasis added}

I think I found the problem.

If the cops’ computer network is insecure, they’re doin’ it 'rong!

[dragonfrog]

Find me a secure network in any organization that isn’t either a large military, or all about IT. If you think that can be done, you haven’t worked in IT.

[shaddack]

@davide405

If the cops’ computer network is insecure, they’re doin’ it 'rong!

@dragonfrog

Find me a secure network in any organization that isn’t either a large military, or all about IT. If you think that can be done, you haven’t worked in IT.

Notice that these two statements are everything but mutually exclusive.

[davide405]

@dragonfrog

If you think that can be done, you haven’t worked in IT.

PHI?

PCI DSS?

Of course, you already hedged your bet with the “No True Scotsman” cheat, so I there’s no motive for me to offer my bona fides.

[shaddack]

@davide405

PHI?
PCI DSS?

Plethora of bad implementations (and resulting published incidents) of these Out There.

[dragonfrog]

That’s probably a fair call on the “No true Scotsman”.

I’m not famliar with PHI, but from what I know of PCI DSS it really just calls for basic sensible security - a good thing, and something plenty of orgs fall short of, but still not at all the kind of thing where it would be really surprising to find some undetected malware sitting around on a few PCs.