Agreed, partners should be treated identically to the internet as far as threat-level. They may get a few port openings or something but they are *not to be trusted*. This Jim Davis guy pisses me off by doing corporate PR spinning in such a dangerous field; this isn't some credit card number leak.

Asserting that this incident doesn't mean circuits between ops and business units can't be implemented securely is a BS smoke-screen. This incident means the the circuits ARE NOT being implemented securely. In theory anything can be implemented securely or not. We need a no bullshit assesment of standard practices and reality to make these decisions, not some PR-spawned fantasy world where anything is possible.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/6767/21684#21684