full-disclosure

Open Source and information security mailing list archives

Message-ID: <Pine.LNX.4.62.0807171916190.26086@linuxbox.org>
Date: Thu, 17 Jul 2008 19:18:11 -0500 (CDT)
From: Gadi Evron <ge@...uxbox.org>
To: The Security Community <thesecuritycommunity@...il.com>
Cc: funsec <funsec@...uxbox.org>,
	Full-Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: [funsec] Stop The 70% Lie

On Thu, 17 Jul 2008, The Security Community wrote:
> http://70percenters.googlepages.com/
>
> "The FBI estimates that about 70 percent of all computer security
> breaches are perpetrated by insiders."
>
> For years this lie and variations on the same theme have been
> spreading through the Internet and the industry press.
>
> Year after year journalists, security marketers, bloggers, and other
> media types continue to publish this nonsense as though it were the
> Gospel Truth when the truth is the FBI has never published any survey,
> study, or statistical analysis that supports this claim.

Not reading the post below, I can tell you the numbers are based on real 
research, but it is so old my memory fails me. It is a case of a number 
being repeated and copied so many times over it gains credibility and 
immortality.

There are some decent numbers from the CSI/FBI annual survey.

Also, when counting incidents, it really matters what types of incidents 
are included.

 	Gadi.

> Inspired by http://blogs.zdnet.com/careers/?p=127
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives