full-disclosure - Re: Is the Bottom Line Impacted by Security Breaches?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed Sep 28 19:33:53 2005
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: Re: Is the Bottom Line Impacted by Security
	Breaches?

> I'm not so sure it's that simple... People were aware of it.

Um .. but *which* 40mil was it? Am I one of them? Hearing that 40mil 
random people got nicked is one thing .. me getting a letter from MBNA 
another.

Mastercard/Visa certianly know .. and so do some member banks, because 
some of them (in Australia, IIRC) replaced their cards proactively.

Their "logic" behind this is that their "zero liability due to fraud" 
clauses make it illogical to even care about compromised account numbers 
.. but anyone that's tried to contest a charge (because most don't let 
you do it online like AMEX does) .. can attest to what a major PITA that 
is (certified mail, etc.).

> One would hear about such loss from publicly traded companies, similar to
> the 4% loss in Q2/2005 due to the Wendy's chili case.

And hopefully .. once they go public .. they'll be held a bit more 
accountable.

~Mike.