>>It was $0 to the consumers, but certainly

>>not Lowes. To get a basic idea of why,

>>read "I only replaced index.html" >>http://www.packetstormsecurity.com/docs/hack/i.only.replaced.index.html.txt

Sure, it costs some money and nerves... But: What if someone else would have hacked in, stole Data from Databases - deleted everything...

In THIS case jail for 9 Years ist justified.

What is caused by "replacing index.html" just makes people do, what they allready should have done - what they are _required_ to have done. Sure, they do it very quickly and at the cost of a lot more money - but this is why they didnt do when there was the time to do...

It's just the usal bussiness to leave the system unsecured until something real happens - and afterwards everything is too late. Everyone that is responsable for secureing the system believes the attacks would "slowly" beginn and fail and if it begins they would notice and do their job...

But it seems hackers are much faster than that - they work, when admins sleep or are away much faster than the admin can say "oops".

Just think about it... Isn't it normal that you tell someone that his door isnt locked, when you know he forgot it and wanted to lock it?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10138/29538#29538