Security in IT here in Japan has largely been an afterthought or security theatre. Passwords stored in plaintext are not uncommon (I've signed up for things and had my password in plaintext sent in email back to me). It seems to be getting better slowly. My current company has a whole security division, which is a nice change.
NDAs prevent me from being too specific, but I worked previously at another company in Japan that refused to hire security staff or even pay for the occasional pen test and audit. I fixed everything I could find on my own, but I highly doubt that there were no other issues left as I'm not a security pro.
Then you have things like https://www.bbc.com/news/technology-46222026 -- the cyber security MP has never used a computer. Even if their job is mostly to appoint the right people and manage that sort of thing, they still are doing a clearly terrible job of it.
Oh jeez, the security nightmares I’ve seen here keep me up at night. You’re doing good work, fixing what you could from the inside of where you worked.
While it isn’t ubiquitous here in Australia by any means, fax still occupies some weird areas of law that make it common. When my doctor sends a referral it is almost always via fax, because email isn’t legal. Apparently, owning a phone number is more proof than owning an email address?
What’s hilarious is that most medical providers use fax-over-VoIP (yes, that’s apparently the term) anyway ¯_(ツ)_/¯
Nothing to do with security. Everything to do with olds not wanting to learn anything new. I had a client, a doctor, do early retirement instead of move his paper files into and EMR system. Because he didn’t want to learn it. Kind of like appointing a boomer with zero IT experience to the head of cybersecurity. Any country that is short sighted enough to pull that shit deserves to have their networks wrecked.
Add comment