Penetration Testing mailing list archives
Re: Gartner's Security 3.0
From: "Jay D. Dyson" <jdyson () treachery net>
Date: Mon, 22 Oct 2007 14:54:55 -0400 (EDT)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 22 Oct 2007, M.B.Jr. wrote:
That's certainly in keeping with the way industry treats security: it's consistently regarded as an afterthought.Didn't get your point here; see, they are obviously suggesting prevention.
My point is that prevention and redress of security issues are consistently given only cursory attention; often little more than lip service...until systems start crashing or the firm starts hemorrhaging sensitive data.
To be honest, I'm not very concerned. I wear a lot of hats across the IT sector, so I've always got work. But when (not if) the next system gets cratered because of lousy security, I'll be more than happy to do the work, earn the large sums, and consider the cashing of the customer's checks as my way of saying, "See, I told you so."Oh, very professional.
Thanks. I've long appreciated the wisdom of the adage that one can lead a horse to water but cannot make it drink, so I focus instead on making the beast thirsty enough to rethink its mission.
- -Jay ( ( _______ )) )) .-"There's always time for a good cup of coffee."-. >====<--. C|~~|C|~~| \------ Jay D. Dyson - jdyson () treachery net ------/ | = |-' `--' `--' `-- Save the planet. I intend to conquer it. --' `------' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: See http://www.treachery.net/~jdyson/ for current keys. iD8DBQFHHPID6U584KgAiasRApGsAJ9EsKQwFfr8GZ0igU/DqjmMMawYggCeIeL1 n8Q8h2HdRSgHlEKfeTC5i3g= =jd/M -----END PGP SIGNATURE----- ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
Current thread:
- Re: Gartner's Security 3.0, (continued)
- Re: Gartner's Security 3.0 xelerated (Oct 16)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 18)
- Re: Gartner's Security 3.0 Santiago Barahona (Oct 18)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 19)
- Re: Gartner's Security 3.0 Sebastien Tricaud (Oct 18)
- Re: Gartner's Security 3.0 Pete Herzog (Oct 18)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 20)
- Re: Gartner's Security 3.0 Pete Herzog (Oct 20)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 20)
- Re: Gartner's Security 3.0 Jay D. Dyson (Oct 18)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 23)
- Re: Gartner's Security 3.0 Jay D. Dyson (Oct 23)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 23)
- Re: Gartner's Security 3.0 pkc_mls (Oct 19)
- Re: Gartner's Security 3.0 Guilaume Vissian (Oct 19)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 23)
- Re: Gartner's Security 3.0 M.B.Jr. (Oct 23)
- Re: Gartner's Security 3.0 Guilaume Vissian (Oct 19)
- Re: Gartner's Security 3.0 xelerated (Oct 16)