Penetration Testing mailing list archives

Re: Gartner's Security 3.0


From: "Jay D. Dyson" <jdyson () treachery net>
Date: Mon, 22 Oct 2007 14:54:55 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 22 Oct 2007, M.B.Jr. wrote:

That's certainly in keeping with the way industry treats security: it's consistently regarded as an afterthought.

Didn't get your point here; see, they are obviously suggesting prevention.

My point is that prevention and redress of security issues are consistently given only cursory attention; often little more than lip service...until systems start crashing or the firm starts hemorrhaging sensitive data.

To be honest, I'm not very concerned. I wear a lot of hats across the IT sector, so I've always got work. But when (not if) the next system gets cratered because of lousy security, I'll be more than happy to do the work, earn the large sums, and consider the cashing of the customer's checks as my way of saying, "See, I told you so."

Oh, very professional.

Thanks. I've long appreciated the wisdom of the adage that one can lead a horse to water but cannot make it drink, so I focus instead on making the beast thirsty enough to rethink its mission.

- -Jay

   (    (                                                       _______
   ))   ))  .-"There's always time for a good cup of coffee."-.  >====<--.
 C|~~|C|~~| \------ Jay D. Dyson - jdyson () treachery net ------/ |    = |-'
  `--' `--'  `-- Save the planet.  I intend to conquer it. --'  `------'

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iD8DBQFHHPID6U584KgAiasRApGsAJ9EsKQwFfr8GZ0igU/DqjmMMawYggCeIeL1
n8Q8h2HdRSgHlEKfeTC5i3g=
=jd/M
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: