full-disclosure - Soft-Chewy insides (was: CyberInsecurity: The cost of Monopoly)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030929155417.F071238108@mail.secnap.net>
From: scheidell at secnap.net (Michael Scheidell)
Subject: Soft-Chewy insides (was: CyberInsecurity: The
 cost of Monopoly)

> 
> <cynical grin>  Would that that would really help.  I guess maybe in the 
> long run it might, but I'm not holding my breath.  There's still the 
> small matter of connecting cause with effect and then implementing a 
> program that will function appropriately at all levels of the 

Just did a presentation to a bunch of AeA CFO's (AeA is American
Electronics Association) where the fist slide I gave them a piece of
paper that has to go with their 10K reports and said:

Ok, as the CFO of a public company, would you sign this:
(a bunch of legal gook I got from our SEC lawyer).

Went through a high(board level) presentation with lots of pretty color
pictures, talked about jail time and fines and informed them that the
CFO is the one who will sign it.. 
then when done, said 'ok, NOW who will sign this.  You KNOW for a FACT
that your IT department has taken care of this, right? you don't need an
outside/third party audit to make sure the IT or internal security guys
did their job, right?

 NO ONE. wanted to sign it then.
-- 
Michael Scheidell
SECNAP Network Security, LLC 
Main: 561-368-9561 / www.secnap.net
Looking for a career in Internet security?
http://www.secnap.net/employment/