Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Who's to blame?
Kelly Martin, 2005-07-05

If there's one thing the security industry is really good at, it's pointing fingers. We all like to say that, "security starts with you," so that everyone can share a piece of the mud pie. While we're pointing fingers, let's look at a few groups and individuals and see how they can share the blame for their own insecurity - and prevent the spread of viruses, Trojans and worms.

Comments Mode:
Who's to blame? 2005-07-05
Anonymous (1 replies)
"I signed up at the YMCA gym the other day, and noticed that they store my credit card information in their computers. I glanced over and saw a DOS-like screen, and gave out a huge sigh of relief. The technology they use predates the Web by about ten years, so the odds of them having Internet access at this gym are slim-to-none."

Just because it looks like a DOS screen doesn't mean there's no Internet connectivity. Likely that credit card isn't kept on the local machine. It's probably on a network server somewhere. What does that network server run? Windows or UNIX/Linux? And how do you feel about employees there having access to your credit card information? Granted, the YMCA is supposed to be a good, moral, upstanding organization. That's not to say that there aren't some bad apples. And there may be other computers that have access to your credit card number that DO run Windows on their campus.

Don't get your hopes up . . .

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/337/32126#32126
Not to mention off-site backups 2005-07-07
Anonymous
Who's to blame? 2005-07-06
Anonymous
Who's to blame? 2005-07-06
vinicius
Outbound SMTP port 25 2005-07-07
Anonymous
Who's to blame? 2005-07-09
Anonymous
Who's to blame? 2005-07-09
Alexey Vesnin
Old OS versions. 2005-07-11
Roger
Who's to blame? 2005-07-13
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus