Suncor downed by Cyberattack

[suntan]

Believe it or not, there's actually a lot of case law that sides with the employee if they get phished, etc.

Ask me how I know.

[BokCh0y]

This quote is hidden because you are ignoring this member. Show Quote

Nah, had nothing to do with that, I never revealed anything that would have linked anything back to him. He told me why he was fired....and it's pretty crazy. He may lawyer up.

So now that he's no longer with Suncor, tell us the inside deets re: the situation on the cyber attack. Don't need to know about why they canned him.

[msommers]

If they're lawyering up, divulging anything is a very bad idea.

Wait until after for the gossip

[g-m]

What is a CIO?

[BokCh0y]

This quote is hidden because you are ignoring this member. Show Quote

What is a CIO?

Usually a slave to the CFO.

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

What is a CIO?

Chief Information Officer. Basically top IT guy. Sometimes they make CFO wear the same hat since both IT and Accounting are cost centers.

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

If he's lawyering up, it sounds like 'alleged' cause

Not necessary. A place I used to work at, someone got laid off 1 year away from DB pension (min payout) kicks in due to "performance". She lawyered up and got her DB pension.

That was a 80s style O&G DB pension, I would have lawyered up too.

[msommers]

CIO and CTO are different?

[ExtraSlow]

You'd hope a company didn't have both, but different purposes I'd think.

[firebane]

This quote is hidden because you are ignoring this member. Show Quote

CIO and CTO are different?

Yes they are different and serve different purposes.

[killramos]

Yes. The purpose being keeping 2 people happy instead of one

[bjstare]

This quote is hidden because you are ignoring this member. Show Quote

CIO and CTO are different?

There’s a Venn diagram with some overlap, the specifics of which are different at every company. Companies don’t always have both roles.

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

CIO and CTO are different?

In theory, CIO waste money and CTO makes money.

Facebook may need a CTO but Suncor doesn't.

But

This quote is hidden because you are ignoring this member. Show Quote

Yes. The purpose being keeping 2 people happy instead of one

[taemo]

anyone privy of the suncor report that was released to some O&G members yesterday?
from what i heard is that it was a vhishing attack to their help desk. and moving their helpdesk back to inhouse

[Xtrema]

This quote is hidden because you are ignoring this member. Show Quote

anyone privy of the suncor report that was released to some O&G members yesterday?
from what i heard is that it was a vhishing attack to their help desk. and moving their helpdesk back to inhouse

Vhishing is confirmed. HD reset some password of a privileged user that is a contractor.

Basically, HD didn't follow script.

How they target that particular contractor. Who knows. Given how everyone take a shit without posting to LinkedIn, I don't doubt a bunch of hackers are scraping whatever off that platform to find the mark.

No idea what process remediation is. But server solution is Greenlake to get thing running in the cloud 1st and repatriate as Greenlake on-prem hardware shows up.

[firebane]

This quote is hidden because you are ignoring this member. Show Quote

Vhishing is confirmed. HD reset some password of a privileged user that is a contractor.

Basically, HD didn't follow script.

How they target that particular contractor. Who knows. Given how everyone take a shit without posting to LinkedIn, I don't doubt a bunch of hackers are scraping whatever off that platform to find the mark.

No idea what process remediation is. But server solution is Greenlake to get thing running in the cloud 1st and repatriate as Greenlake on-prem hardware shows up.

I worked at one company and they had a 3 question verification system setup and you had to get all 3 correct or we wouldn't do anything for you. And the best part is was up to the employee to ensure those questions were accurate and up to date.

One day I had someone call for a password change and they couldn't get a question right about their wedding date because apparently they had been married like 3x since working with the company. So we said sorry can't help and will need someone to help verify you and they got someone who also couldn't verify.

Verification can be a royal pain in the ass.. but it can work if done properly.

[suntan]

Married people suck.

[ExtraSlow]

Married 3x is a sign of mental illness.

[BerserkerCatSplat]

This quote is hidden because you are ignoring this member. Show Quote

I worked at one company and they had a 3 question verification system setup and you had to get all 3 correct or we wouldn't do anything for you. And the best part is was up to the employee to ensure those questions were accurate and up to date.

One day I had someone call for a password change and they couldn't get a question right about their wedding date because apparently they had been married like 3x since working with the company. So we said sorry can't help and will need someone to help verify you and they got someone who also couldn't verify.

Verification can be a royal pain in the ass.. but it can work if done properly.

When I worked at UCIT eons ago, they had a similar system, the users needed to have 3 Q/As on file but we only checked two for verification. Had a guy call in for a PW reset, pulled up the verification.

"OK, what's your wife's maiden name?"

"Toronto Maple Leafs."

"Sorry, you may have misheard me, I was looking for your wife's maiden name?"

"Yep, that's my security answer."

Sure enough, his wife's maiden name was listed as Toronto Maple Leafs.

"Ok, next verification question, what was the colour of your first car?"

"Toronto Maple Leafs."


I had to give him credit. Nobody was going to be able to pretend to be him, even if they actually knew the right answers!

[ExtraSlow]

Another sign of mental illness.