Re: Italian Police Nab Hacker Group

[InfoSec News <isn () c4i org>]

Forwarded from: Bill Barrett <bill_barrett () uhaul com>

Website defacements are no more than graffiti in digital form.  
Should their entire lives be ruined because they did this?  how about
if they were doing it with a can of spray paint on the side of your
office building?  and exactly what are the monetary damages?  While
it's easy to say how much it cost to have a painter remove a
spray-paint tag it's a lot harder to quantify the cost of running a
restore from backup and slapping on the patch you should already have.  
Am I saying these kids should go off scott free?  Hell no.  But every
time I hear about all the costs for this or that defacement and the
talk about millions of dollars you have to wonder where they are
getting this information.

Yes, ignorance does not justify attack. But if you are an admin its
you JOB to know how to secure your servers.  If you leave your servers
wide open to attack and they get hacked and you get fired it's your
own damn fault for not going down to the local Barnes&Noble and
picking up a couple books on how to secure your servers.

As far as these kids go make em pick up trash every weekend for 10
hours a day for a few months and give em a fine that will put a hurt
on them.  oh and put a suspended sentence over their heads so if they
f-up again they do some extra jail time in addition to their sentence.
but that's just my opinion i could be wrong.

-WTB 

isn () c4i org writes:
> Forwarded from: leon <leon () inyc com>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I would like to say that anytime a website gets defaced there are
> always monetary damages.  There are always qualitative damages that
> are hard to put a dollar figure on.  If a customer goes to the gap
> website and finds it defaced are they going to feel comfortable doing
> business with them over the web?  Also the webservers admin probably
> gets fired or reprimanded and some might just not know how to secure
> their webservers.  Ignorance doesn't beg or justify attack.
>
> The fact that these kids are going to get off with just a slap on the
> wrist does not seem fair.  What do other people think?
>
> Cheers,
>
> Leon
>
> http://www.pcworld.com/news/article/0,aid,79686,00.asp
>
> ROME -- Italian police have identified six members of a hacker group
> charged with attacking thousands of Web sites in 62 countries,
> replacing official home pages with anti-globalization slogans,
> finance

[...]



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.