RE: Informing Companies about security vulnerabilities...

["Michael Scheidell" <scheidell () secnap net>]

> -----Original Message-----
> From: listbounce () securityfocus com 
> [mailto:listbounce () securityfocus com] On Behalf Of Arian J. Evans
> Sent: Friday, October 06, 2006 11:41 AM
> To: pen-test () securityfocus com
> Subject: RE: Informing Companies about security vulnerabilities...
> The questions I still have:
>
> 1) How bad does it have to get? Human life?

The medical profession seems to be the worst when it comes to
proactivally addressing the security issue (insurance is cheaper than
fixing the problems)..

Financial instituts are the quickest at it. (I guess money is worth more
than life)

No, its not the threat of the loss of human life that motivates a
company to fix their security problems, its los of money.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------