full-disclosure - Security Breaches Pandemic (1) links

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <44A03DAF.2020306@utdallas.edu>
Date: Mon Jun 26 21:26:15 2006
From: pauls at utdallas.edu (Paul Schmehl)
Subject: Security Breaches Pandemic (1) links

Al Mac wrote:
> http://www.itjungle.com/tfh/tfh062606-story06.html
> 
> http://www.securitypronews.com/news/securitynews/spn-45-20060623DeloitteCallsOutTechFirmsOnSecurity.html
> 
> http://www.irishdev.com/NewsArticle.aspx?id=2902
> 
> http://www.deloitte.com/dtt/research/0,1015,sid%253D1000%2526cid%253D121102,00.html
> <http://www.deloitte.com/dtt/research/0,1015,sid%3D1000%26cid%3D121102,00.html>Good 
> articles here, in which I am merely summarizing some main points.
> Remember that Security Breaches have been occurring for decades.  The only 
> thing, that is relatively new, is a legal mandate to report them, when this 
> affects residents of some USA states, and that is assuming the breached outfits 
> even know they been breached.  For most of the world, this mandate does not yet 
> apply.  So what we have recently been seeing in the news, about security 
> breaches, is just the tip of an iceberg.
> 
The tip of what iceberg?  Since "security breach" is never defined, it's 
impossible to know what D/T's survey means.  Are these actual breakins 
to machines?  Do they include virus infections?  Adware infections? 
Phishing attempts?  Etc., etc.

Without defining what "security breach" means, it's useless information.

-- 
Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5007 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060626/896aa6e1/smime.bin