full-disclosure - Re: A Botted Fortune 500 a Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-id: <46262A4B.32192.9CC0D249@nick.virus-l.demon.co.uk>
Date: Wed, 18 Apr 2007 14:25:15 +1200
From: Nick FitzGerald <nick@...us-l.demon.co.uk>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: A Botted Fortune 500 a Day

Troy to me:

> > SI is, however, showing that at least some F500s
> > have lazy arse/stupid/otherwise incompetent admins and/or oversight
> > procedures and/or policies driving the whole mess of their IT systems,
> > and as a result the rest of us pay for their incompetence.
> 
> I've worked in a large corporate environment. I don't think it's a matter of
> the admins being lazy or incompetent. It's more a matter of corporate
> politics. The admins roll out a policy that locks down all workstations,
> prohibits the installation of unapproved software, and prevents visiting
> restricted web sites, and all is well. Then, Melllvar, the CEO's nephew in
> accounting, complains that he can't play World of Star Trek. The CEO comes
> down on the IT department, and the admins either lose their jobs or open a
> few holes for Melllvar, who promptly installs a "crack" for his game,
> unleashing a bot on the local LAN.

There'a a lot of stupid/lazy/incompetent admin'ing out there too, 
though as I suggested with my "and/or" options, often what is 
supperficially "obvious admin incompetence" from the outside is 
actually due to a failure (commonly in the form of managerial override 
you describe) of otherwise good policies and implemantation.  That said 
though, if an incompetent to decide CEO (etc, etc) can so easily 
override the agreed policies, etc, then the system is just as borked as 
if the firewall rules, client lockdown policies, etc, etc were 
incomplete/missing/etc and the rest of us are scarcely any better off 
than if it were simple administrative incompetence, as the result is 
the same.  If more admins stood up to such "managerial incompetence" 
things might actually change for the better, as like it or not, it _is_ 
managerial incompetence that is the problem here, regardless of the 
source of the problem being admin incompetence or policy override...

Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/