full-disclosure - NASA.GOV SQL Injections

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031017185320.GA39973@netpublishing.com>
From: ggilliss at netpublishing.com (Gregory A. Gilliss)
Subject: NASA.GOV SQL Injections

FWIW my experience with NASA, while limited, has been equivalent to many
large private sector organizations. The rank and file people, including
Directors and Assistant Directors, are intelligent, conscientious people
who run headlong into uncaring, frustrating upper management bureaucrats 
who cannot or will not listen to their input. Also, because the organization
is broken up into several regional and sectional groups, political rivalries
have developed that get in the way of organizational goals. Like I said,
same thing as corporate America: politics as usual. 

"We are the people our parents warned us about."

G

On or about 2003.10.17 13:03:52 +0000, Ron DuFresne (dufresne@...ternet.com) said:

> Of course, one might think the same thing about the FED gov and the
> various states govs.  Untill one looks at pay rates, and how they compare
> to the private sector.  And that pays little or no mind to the POLITICS in
> such places.  One does not merely work in a gov related setting, one HAS
> to play a political tightrope walk, with less the proportional pay that
> private sector jobs provide.  Thus, when the OSB and GAO audits and their
> released findings that make it into the headlines and before congress now
> and then come as no surprise.  I did an interesting article on the state
> of cyber security a year or so ago mentioning some of this  for TISC
> Insight Newsletter, and a copy can be found at
> http://sysinfo.com/sec-state.html.

-- 
Gregory A. Gilliss, CISSP                             Telephone: 1 650 872 2420
Computer Engineering                                   E-mail: greg@...liss.com
Computer Security                                                ICQ: 123710561
Software Development                          WWW: http://www.gilliss.com/greg/
PGP Key fingerprint 2F 0B 70 AE 5F 8E 71 7A 2D 86 52 BA B7 83 D9 B4 14 0E 8C A3