Security seems like an afterthought with some cloud services

Spotify today.

Last week, it was eBay.

It seems kind of nuts, but don’t these companies rushing to provide cloud-based services even take the time to consider security, both infrastructure and user security, in the architecting of their products?

It is quite tiring to continually read of some new-fangled service that has exposed users and their PIIs to breaches that could have been avoided with their product being created from the ground up with security in mind.

And if security is frowned upon by the product’s owners because it isn’t their core competency, one wonders why they don’t , won’t, or haven’t availed themselves of available user authentication platforms such as Microsoft Account, etc.

From my perch, one would think that doing so might actually help them speed their wares to market, since that is something else they don’t have to worry about.

That said, don’t get me started on the bonehead response by eBay to the hack(s) exposed 145 million users to potential attacks. http://www.wired.com/2014/05/ebay-demonstrates-how-not-to-respond-to-a-huge-data-breach/

Source: Chicago Tribune

© 2002 – 2014, John Obeto for Blackground Media Unlimited

1040-5