Re: Hacking Demonstration Shows Dangers of E-Commerce

[mea culpa <jericho () DIMENSIONAL COM>]

REPLY From: "Robert G. Ferrell" <root () rgfsparc cr usgs gov>

> REPLY From: The Dodger <dodger () 2600 com>

> If I were a charitable person, I'd say that this sounds like hype to me.
> However, I'm not a charitable person, so I'll say what I think - this is
> crap.

I second that motion.

> This article is a perfect example of the sort of scaremongering and hype
> that Internet security startups are using to get media exposure. It
> basically equates to free advertising and is a sure sign that the company
> is thinking about an IPO.

Zing!

> I also smell a rat in Reshef's refusal to say which IDF unit he served in.
> In most countries, people who work in secret organisations, whether they
> be army units or intelligence services, have a legend. For example, here
> in the UK, someone who works for the Secret Intelligence Service
> (commonly, but mistakenly referred to as MI6), if asked what he did for a
> living, would say that he was a civil servant in the Foreign &
> Commonwealth Office or the Ministry of Defence. If an SAS trooper is asked
> what regiment he's in, he'll name his parent regiment, rather than the
> Special Air Service. Saying "I can't tell you" isn't done.

Right.  And here in the US, if someone asks you, you first say "I work for the
US Government in Washington, DC," if they press you, you can add, "I work for
the Dept. of Defense" (in the case of the NSA).  Or in some cases you might have
a completely fabricated cover story, which would include a place of employment.
The last thing any real intelligence operative would say is, "I can't tell you."
Might as well wear a t-shirt that says "CIA-Covert Operations" on it or
something.

> I must admit that, unlike Felix, I do actually feel that b/s like this has
> a place on the mailing list, because this is the sort of stuff we need to
> know about, so we can head it off at the pass, so to speak.

Yep.  The only way to teach people to separate the stinky stuff from the good
stuff is to plop it down in public and let 'em sniff for themselves, IMO.

RGF

Robert G. Ferrell
Internet Technologist
National Business Center, US DoI
Robert_G_Ferrell () nbc gov

ISN is sponsored by Security-Focus.COM