<story><title>Equifax CEO to Congress: Not Sure We Are Encrypting Data</title><url>https://www.wsj.com/articles/equifax-ceo-to-congress-not-sure-we-are-encrypting-data-1510180486?mod=yahoo_hs&amp;yptr=yahoo</url></story><parent_chain></parent_chain><comment><author>tptacek</author><text>Encryption wouldn&amp;#x27;t have mattered here. To a pretty good first approximation, none of the &amp;quot;encryption&amp;quot; done at scale at any Fortune 500 company in the US is more than a speed bump for attackers. Unless you&amp;#x27;re using moon math --- nobody is --- enterprise backend encryption is hamstrung by the fact that you&amp;#x27;re keeping the data because &lt;i&gt;automated business processes need to use it&lt;/i&gt;, which means automated systems need to decrypt it.</text></comment>
<story><title>Equifax CEO to Congress: Not Sure We Are Encrypting Data</title><url>https://www.wsj.com/articles/equifax-ceo-to-congress-not-sure-we-are-encrypting-data-1510180486?mod=yahoo_hs&amp;yptr=yahoo</url></story><parent_chain></parent_chain><comment><author>mrguyorama</author><text>I don&amp;#x27;t know which is worse: That Equifax is straight up lying about their infrastructure to hide malpractice, or that they don&amp;#x27;t even know</text></comment>