full-disclosure - Calcuating Loss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <007701c43775$0de41810$9800a8c0@cryo>
From: clint at secureconsulting.com (Clint Bodungen)
Subject: Calcuating Loss

Ah I figured I'd get a few flames without clarifying that I was speaking
through empathy for the clueless.

No, I wasn't referring to myself directly.  Unfortunately, many companies
out
there lose money for that very reason though (was my point).  They blindly
trust
M$ and its updates and just go installing updates.  As a result we the
consultants get called in to clean up the mess.  Nice job security but
frustrating.

----- Original Message ----- 

> Clint...
>
> Two words..."testing process".  What happened to that?
>  Don't tell me you're installing patches directly to
> production systems...