[Banking_and_finance] Daily News 08.26.03 (fwd)

[David Kramer]

On Tuesday 26 August 2003 01:05 pm, Timothy M. Lyons wrote:
> I would hope that now the FBI is involved, the systems were imaged and are
> currently being anaylized.  I am more unnerved by reading that the bank was
> aware of the issue but didn't take down the site until later in the day.  It
> makes me wonder how responsive they are to other customer security threats?
> 
> For their sake they better have a current third-party SAS70 or WebTrust
> assurance report on-file for the website.

The more I read 2600, the more I feel that cracking is a people problem, not a 
computer problem.  People who rely on known-buggy software, people who do not 
use firewalls, people who do not keep their software updated, people who do 
not pay the money to hire smarties to protect their company against 
others....

The computer part is the easy part.

----------------------------------------------------------------------------
DDDD   David Kramer         david at thekramers.net       http://thekramers.net
DK KD  "We are stuck with technology when what we really want is just stuff
DKK D  that works.  How do you recognize something that is still technology?
DK KD  A good clue is if it comes with a manual."
DDDD         - Douglas Adams, in The Salmon of Doubt. (Harmony Books, 2002.)