lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20140402183851.0F8D61FE91@omniplex.omninet.local>
Date: Wed, 2 Apr 2014 20:38:50 +0200
From: raccoon <raccoon+fd@...post.org>
To: fulldisclosure@...lists.org
Subject: Re: [FD] Bank of the West security contact?

On Mon, Mar 17, 2014 at 09:15:50AM -0700, Kristian Erik Hermansen wrote:
> * Bank of the West does not seem to take security and privacy
> seriously enough, as far as I can tell

This goes for all banks and is probably one of the reasons most ATMs
still run windows and are skimmable time after time by the simplest
exploits. 

It's simply cheaper and easier to cover the losses and spin the news
after an incident than to spend money on preventive security and
research... They made the cost/benefit calculation eons ago,
concluding this way is cheaper, and it obviously still proves.

Probably goes for lots of other areas part from banking aswell.

-- r

mail    raccoon at fripost.org
xmpp            && jabber.ccc.de
gpg             && 0x4B0EE1DC

Download attachment "signature.asc" of type "application/pgp-signature" (231 bytes)


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ