Re: NASA.GOV SQL Injections

["Gregory A. Gilliss" <ggilliss () netpublishing com>]

FWIW my experience with NASA, while limited, has been equivalent to many
large private sector organizations. The rank and file people, including
Directors and Assistant Directors, are intelligent, conscientious people
who run headlong into uncaring, frustrating upper management bureaucrats 
who cannot or will not listen to their input. Also, because the organization
is broken up into several regional and sectional groups, political rivalries
have developed that get in the way of organizational goals. Like I said,
same thing as corporate America: politics as usual. 

"We are the people our parents warned us about."

G

On or about 2003.10.17 13:03:52 +0000, Ron DuFresne (dufresne () winternet com) said:

> Of course, one might think the same thing about the FED gov and the
> various states govs.  Untill one looks at pay rates, and how they compare
> to the private sector.  And that pays little or no mind to the POLITICS in
> such places.  One does not merely work in a gov related setting, one HAS
> to play a political tightrope walk, with less the proportional pay that
> private sector jobs provide.  Thus, when the OSB and GAO audits and their
> released findings that make it into the headlines and before congress now
> and then come as no surprise.  I did an interesting article on the state
> of cyber security a year or so ago mentioning some of this  for TISC
> Insight Newsletter, and a copy can be found at
> http://sysinfo.com/sec-state.html.

-- 
Gregory A. Gilliss, CISSP                             Telephone: 1 650 872 2420
Computer Engineering                                   E-mail: greg () gilliss com
Computer Security                                                ICQ: 123710561
Software Development                          WWW: http://www.gilliss.com/greg/
PGP Key fingerprint 2F 0B 70 AE 5F 8E 71 7A 2D 86 52 BA B7 83 D9 B4 14 0E 8C A3

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html