The root cause goes back to the early days of the Internet;

1. poor security practices

2. organizations don't take it seriously till they get owned and it goes public

3. poor software code prone to being exploited

due to lack of good QA

4. no active monitoring of security devices, yes people, you really have to monitor those security infrastructure, it does magically stop attacks without a human

5. attribution is hard

All of this equals too easy for electronic criminals to take advantage of unsuspecting folks or organizations...

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10525/30686#30686