rant: Abandon Ship! Data Loss Ahoy!

[lyger <lyger () attrition org>]

http://attrition.org/security/rant/z/rapid7.html

Tue Mar 18 16:10:57 EST 2008
d2d

You are a security vendor. You sell the mightiest security doohickey the world 
has ever seen. It does it all, including "...ensuring your network is safe from 
hackers..." and amazingly it "...scans for Web site and database 
vulnerabilities that hackers can use to capture credit card information without 
you being aware". Since your doohickey does what no others have ever 
successfully managed to do, you can tout your client list proudly, and pimp 
your customer implementations liberally.

UNTIL...

One of your customers joins the etiolated top 10 with a massive hacker 
perpetrated data loss incident.

OUCH.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml