Dailydave mailing list archives

Fair and Balanced part 2!


From: Dave Aitel <dave.aitel () gmail com>
Date: Wed, 8 Jun 2011 15:13:28 -0400

I did a foxnews.com interview today at 10:30 about Lockheed Martin,
Sony, LulzSec, etc. But I can't find a link to the video, so instead
you should watch this video of Mark demonstrating SILICA's new
features -
http://www.immunityinc.com/movies/SILICA_7.3-release.mov.(SILICA is
back up to its normal price of 2500 or so, but if you've only ever
used Aircrack or Netstumbler or one of the other open source wireless
hacking tools, then you're in for a treat...)

My main theme on the foxnews thing was that you can learn almost
everything you'll need to know about a corporation's security just by
looking at their corporate structure. On one, very far, side of the
bell curve you have companies who's CISO position only appears when
they're headlining Fox News and CNBC for getting hacked.  Most
companies, however, range somewhere more normal. The question I like
to ask is: "How often does your security group kill or slow down a
business initiative from a business unit?" If the answer is "Very very
rarely" then you're looking at a very insecure company. Or a company
with lots of "security opportunities", as they say. :>

I know Cigital went around doing a thousand page questionare to
determine how security was built at various software companies. But
you really can boil all that down to "what cool features did security
kill".

Ah, and feel free to comment here as well:
http://council.smallwarsjournal.com/showthread.php?t=13434

-dave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave


Current thread: