The Hacking of Yahoo - Schneier on Security

Check the full post for more details and links

"I did a bunch of press interviews after the hack, and repeatedly said that "state-sponsored actor" is often code for "please don't blame us for our shoddy security because it was a really sophisticated attacker and we can't be expected to defend ourselves against that."

Well, it turns out that Yahoo! had shoddy security and it was a bunch of criminals that hacked them. The first story is from the New York Times, and outlines the many ways Yahoo! ignored security issues."

The Hacking of Yahoo - Schneier on Security