lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 04 Apr 2014 10:30:45 +0200
From: Pete Herzog <pete@...com.org>
To: fulldisclosure@...lists.org
Subject: [FD] Security Industry Scams and Lies

Much of the infosec industry is perpetuating lies. It may have started
with good reason but now it's a huge mess. And those lies have become
part of the culture, the education, and the laws. It's a huge scam.

"We have many new infosec professionals joining the workforce every
year who have been schooled in product configurations, best practices,
and vendor whitepapers as to what security is. Everything they know
about protection has been carefully cultivated through marketing
relationships with colleges and training centers with insights
specially prepared and spoon fed through sponsored news headlines."

from Meaning of Security Hype:

http://www.tripwire.com/state-of-security/featured/security-meaning-hype/

Sincerely,
-pete.

-- 
Pete Herzog - Managing Director - pete@...com.org
ISECOM - Institute for Security and Open Methodologies

Need impartial, expert advice? Request a call:
http://clarity.fm/peteherzog

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ