[dns_snek]

> it is still easy to make misstakes.

That's not an excuse though, any system handling data like that should be continuously reviewed and pentested by professionals. Hopefully they can show that this has been done otherwise it's just negligence.

[lukan]

It was mainly an explanation, that "airgapping" does not magically provides better security, or is required (or possible) to use at all here.

[dns_snek]

And it's pretty clear to me that they were criticizing storage of sensitive data in a database that isn't properly secured and they simply misused the term "airgapped". The database in question was easily accessible from poorly maintained development infrastructure.

> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize

[fc417fc802]

Imagine if the bank took such a cavalier attitude with the contents of my account.