- Nokia's new N97 vs. the iPhone
- 10 Microsoft research projects
- Hard to get justice in MySpace case
- Smartphone smackdown: Storm vs. iPhone
- Apple removes antivirus support page
Now you see them, now you don't … now you do?
Such was the fate last week of online press releases and testimonials touting Hannaford's use of Rapid7's flagship risk-management product. The relationship between the companies had become notable after news of the beleaguered grocer's data breach made major headlines.
The erasure of Hannaford from Rapid7's site was especially curious because Rapid7 was contending that Hannaford has cleared its product of any culpability in the breach. (Hannaford didn't return my calls.) Moreover, Rapid7 couldn't seem to settle on a single explanation — even with the CEO giving it his best shot — for what the company insisted was not an aborted PR purge.
Hannaford had long been a poster child for Rapid7's product, NeXpose, with numerous mentions on its site, all of which (save one) had gone missing as of last Tuesday. On Wednesday morning, a company spokesman told me the Hannaford deletions were in response to a direct request from the grocery chain.
A few hours later, as though by magic, all the Hannaford stuff reappeared on the Rapid7 site … and the fun really began to pick up.
On my second call, I got a different Rapid7 marketing guy who told a completely different story. He said the Hannaford materials were taken off the Web site in response to a massive traffic spike that had hampered customer downloads.
Sounded unlikely, so I tried CEO Alan Matthews, who said the decision to remove the Hannaford materials from his company's Web site was made in tandem by his marketing and network people after news of the Hannaford data breach hit the fan. So far, so good. Less clear was why they did it, and Matthews was of limited help in explaining the various discrepancies.
Regarding Explanation No. 1, namely that Hannaford requested the materials be taken down, he said: "There may have been a discussion about it (between his people and Hannaford), but I'm not sure who actually suggested it or requested it. We may have suggested that we'd done it already and they may have said that's fine."
The first Rapid7 spokesman had been unequivocal in saying that Hannaford requested the purge.
Regarding Explanation No. 2, namely that traffic spike, Matthews said: "When the Hannaford breach was announced, the person who normally administers our Web site thought, 'OK, we should take the press release down,' and he took it down. Because the page went 404, he decided that he would take all Hannaford stuff down. There was a lot of network traffic, although I think (the person who gave me Explanation No. 2) was kind of just making that up as to what happened."
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comments (1)
So what is the right answerBy Anonymous on March 26, 2008, 8:51 pmPaul, I'm not sure from your column what you think should have happened here. It seems clear that there was a scandal and someone made a quick judgment call to...
Reply | Read entire comment
View all comments