Recent Comments
Tag Archives: pen testing
Impacted Molars: Misguided Ninja Dudes and PCI Awareness
MESIALDark Reading continues its obsession with physical security:Network dude rassels potential bad guy, followed by a stern warning on what a scary world it is out there, cause physical attacks hurt.Forgive me if I’m out of line, but why would … Continue reading
Posted in Uncategorized
Tagged breach notification, compliance, disclosure laws, pen testing, physical security
Leave a comment
Buzzword Compliance or Compensating Controls
The most recent SANS e-mail letter, this article from Computerworld on pretty minor (all things considered) security incident at federal retirement fund agency.The voice of SANS (Pescatore in this case) remarked thusly: This and the Nordea incident, as well as … Continue reading
Cooler than an iPhone
Immunity’s Silica. From Immunity’s page: Example Use Cases: Tell SILICA to scan every machine on every wireless network for file shares and download anything of interest to the SILICA device. Then just put it in your suit pocket and walk … Continue reading
The One In Five 