Thursday, August 03, 2006

Intruders Selling Security Software

If you read my coverage of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 UBS trial, you'll remember cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 controversy involving Karl Kasper's "hacker" background. I said in that post:

All cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 wanna-be hacker kiddies should remember that grown-ups don't trust cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opinions of "hackers" in courts of law.

If you wouldn't trust what a "hacker" says in court, would you trust software sold by an intruder?

Yesterday I read this article: Ex-hacker helps companies get defensive. It contains this news:

A reformed computer hacker is winning big clients for open-source software and hardware products that protect a company's network from intruders...

The 27-year-old [name deleted] got his start at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 U.S. Department of Defense in an auspicious way: He agreed to work in information warfare after he was arrested at age 17 for hacking into a government network. In return, he served no jail time.


I'm appalled by this story. First, it demonstrates cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 press' obsession with using cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 term "hacker" to describe an intruder Second, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 intruder is posting word of this story on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 front page of his company's Web site. Third, this intruder worked for a variety of companies in sensitive positions -- including, supposedly, our own government. I wonder which of those post-arrest companies knew about this intruder's arrest? I wonder if this is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first time his customers will learn of his past?

16 comments:

Anonymous said...

Richard:

"I wonder if this is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first time his customers will learn of his past?". I believe that this is just wishful thinking. It is quite apparent, with corporate behavior from organizations like Enron, United Airlines (defaulting on retirement benefits) and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r similar companies, that corporate ethics are 'in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 toilet' cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se days. I don't think many companies would really even care as long as it doesn't interfere with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir bottom line (it's all about 'shareholder value' to keep cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 stock/profits up). Let's be honest, when you purchase an item such as a laptop computer, are you really looking at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 corporate backround of say IBM, Dell, or Shuttle to determine cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir ethics, or is your major determining factor features and price :-)? Most people don't care, it's just anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r piece of equipment that's needed to conduct day-to-day business. The US Government even purchases products such as Microsoft, Cisco, and IBM who all conduct large amounts of development outside of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 United States. Do you really think cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y do source code review on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se products (in addition to background investigations of each programmer who's contributed to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 product from CEO on down)? Doubtfully...just anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r 'supported product' that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y will have someone to search after if something isn't right. Remember...it comes with a 'warranty'.

Anonymous said...

I found this article (rant if you will) about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 subject very sharp: http://www.line56.com/articles/default.asp?ArticleID=7766

Unknown said...

A few things...

Anonymous made a good point by saying that it doesn't matter, but I wouldn't say as much about corporate ethics being in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 toilet, so to speak, as much as it is a realization that whecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r someone has a sordid past or has been a perfect person since birth, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are still someone offering up certain services and skills and talents. It cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n becomes simple risk for HR. Would you turn away someone who can solve a problem you have, just because cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are or were a hacker?

In defense of this guy whom I don't know, I will say his mistake occurred at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 age of 17. I can't think of many people who didn't make mistakes at that age (those few that didn't, I bet wish cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y did...), but maybe his second chance gave him cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tools and moral standing to use his skills in a different way. Thinking ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rwise seems to say if someone breaks cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 law and is caught, he is a criminal for life and we may as well do away with "x years in jail sentences" and just move cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m all to some remote island and save our paradise. I think, however, that enough people can reform and change if given a chance.

Honestly, for as much as I could make snap judgements about ex-hackers, I could make snap judgements about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 lack of skills in straight-laced security personnel. (I won't though.)

Now, with all that said, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 judicial system is a different world altogecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r...

Unknown said...

Just read cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 link from Victor.

I think it is telling that this guy reveals why he is jaded. He actually really does feel resentment not at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 bad morals of ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r people, but that his morals kept him from being in what he perceives as a better position. This destroys a lot of his credibility in his arugments being logical and instead being passion-influenced. He is not being punished by a corrupt soceity for his conscience, he just didn't strive harder or in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 correct ways.

He also makes spurious conclusions that people who do cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se things are "vicious, heartless, and inept." In fact, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opposite could be true, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are demonstrating cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y have a skill, if not moral standing. And his generality for criminals is apalling. Yes, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are some moralistically voided people, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are also people who do just fine who have broken cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 law at some point. He is using extreme examples of people who did wrong things and made money over it, with all cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r criminals whose lives will amount to even less than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 author's.

The US is an interesting entity in that we are Christian (largely) and capitalist, and we cling to those desparetly. This means we love competition, we have a hard-work mentality, and we tend to be very individual. This means that individuals who succeed are valued.

In addition, we have this obsession with drama in ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r people's lives. We snap up cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 books of murderers to read up on it...cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same people that are "hard-working people [struggling] along on dollars a day."

Eicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r way, everyone has cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir own personal morals and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir own happiness and place. Racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r than blame society for one's unhappiness, I think cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r, better ways, to be happy. I will almost sound terrible for saying this, but reading opinions like this make me feel sad that this guy may just live cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 rest of his life in anger, and die angry at ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r people, racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r than being happy with himself...

Anonymous said...

I found it ironic that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 author of Victor's Julien reference seemingly has no qualms about violating anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r author's copyright. Apparently, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 author's ethics do not extend to intellectual propery.

http://www.roughtype.com/archives/2006/04/an_open_letter.php

Also, lonervamp you syllogism regarding Christianity and capitalism is flawed. Just because a nation may be largely Christian and capitalistic does not necessarily mean it loves competition, individualism, etc. Western Europe and Canada are largely Christian and capitalistic but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y favour greater economic regulation, invest heavily in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 welfare state, and believe in a greater
balance between individual and collective rights.

Regards,
David

Unknown said...

Not that I want to discuss it here, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Christian part was mushed togecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r in my sentence. I meant that to only refer to a hard work ethic. A basic attitude in most protestant religions (and thus permeates society) is that of a hard working individual doing something useful.

Anyway, my apologies for mushing that all up. :) Even if I am still flawed, feel free to let me know via email. :)

Anonymous said...

Richard, you posted this blog as if you don't know me, yet you've slung mud at me on mailing lists. Also, are we to believe that you "randomly found this news article" surfing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Chicago Sun Times newspaper when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 truth is you probably check our web site regularly, maybe hoping to find something you can post about in your Blog? I may be an ex-hacker who admitted to making a mistake when I was 17 and luck smiled on me and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 charges were dropped, but I can't believe you lead a perfect life eicá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r and have never made mistakes, especially when you were a teenager. Interesting how you didn't focus on anything else in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 article such as selling my first company when I was 17 to a public company or cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 success my current company has had.

Is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reason you're always firing shots at me because of your involvement in Sguil? -- Which happens to be a competitive product of Applied Watch?

Come on Richard, keep your blog to ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r things racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r than mud slinging at Applied Watch or me. Also, you rant as if I'm writing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 code for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 software. The product has been and continues to be developed by a team of programmers, not me. I'm a self-professed graphics designer for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 company that handles Marketing and Press Relations. Heck, we've got to be doing something right if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 military and government trust and use our product.

Do you do a background check on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 CEO of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 company you hire to do construction work around your house? To check your water meter? Can you account for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 things developers on some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Linux projects and distros out cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re did when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y were kids? Can you account for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 background of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 developers at ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r security product companies that companies you've worked for bought? Just because cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y don't have a record or haven't been arrested, do you actually think it means cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y aren't a hacker or have been engaged in it at one time?

I like how you only cut out cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title. I'm going to forget cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fact that you decided to attack us using this article that I had focus on my facá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r who recently passed away, thats pretty classy of you Richard. Have some dignity. Is this really how a revered author should be acting?

Richard Bejtlich said...

Eric,

How does it matter how I found cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 article? I didn't learn of it by visiting your Web site. You flatter yourself to think I pay attention to your company at all.

While you were busy getting arrested ten years ago for "hacking into a government network," I was defending cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 country as an Air Force officer.

I'm well aware of your Photoshop skills -- you messed up one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 attendee's shirts when you put your logo everywhere in that photo.

You're selling a digital security product. Digital security, at its core, is about trust. I won't buy or use anything I know came from someone who compromised cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 very networks I was once tasked with defending. Why should I when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re are so many ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r options?

I am truly sorry to hear about your facá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r. I can't imagine how tough that might be.

As for your companies and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r past activities, you'd be better off keeping a low profile. I recommend you concentrate on your own business and think twice cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 next time you try to use your "Loki" persona or "ex-hacker" angle to promote yourself.

By cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 way, I never named you directly in my blog post. Anyone who was interested had to look deeper by reading cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story linked from your own Web site. It's not like you slipped up by speaking with a reporter -- you were promoting this through your company.

Anonymous said...

Eric,

Actually, I was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 one who passed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 URL to Rich. I stumbled on it after I looked at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 statistics from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sguil.sourceforge.net site and saw gateway.appliedwatch.com as one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 top hosts visiting, so who is checking up on who? In all honestly, it was August 1st (new month) and probably just a freak accident that you guys were listed as one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 top visitors.

I don't think anyone had any intent on slinging mud at you. Quite honestly, I was merely amazed that someone (anyone) would still use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir 'hacker' past to promote cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365mselves or a company in todays security world. I think Rich agreed and blogged about it. I thought cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 entry was professional. Your comments weren't. I can understand you are a little upset about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 negative publicity, but you should try harder to keep your emotions in check.

Oh, and I don't really think of Sguil and Applied Watch as competing products. Last I knew, you marketed Applied Watch as a SIM and we are pretty fanatical about making sure people know Sguil is not a SIM [0].

Bammkkkk

[0] http://infosecpotpourri.blogspot.com/2006/01/sguil-is-not-sim.html

Anonymous said...

This is my last reply on this forum so if you guys wish to discuss this with me offline, feel free to email me.

Applied Watch is not a SIM and we make it a point not to position ourselves as such. AAMOF, yes, Sguil and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 AWCC are competing products (http://www.appliedwatch.com/products/faq.php#1).

So when you and or Richard write things in forums or mailing lists against me or this company, I'll respond.

Now, regarding cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 newspaper article. Newspapers choose what to write about based on your interview with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m. The title of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 article was chosen by editors at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 newspaper. The issue of me being arrested when I was 17 was a few second explanation to Sandra on how I got in to security. AAMOF, some of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 things I requested be removed were printed anyway. How do you guys think Newspapers work? They lure and want to attract an expanded reading base by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 stories cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y print. How do you make a story more sexy and appealing that would make you want to buy it? Use catch-phrases like "Ex-Hacker".

What do you both think? I wrote cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 article myself and submitted it to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 paper to be printed?

It doesn't work that way. Now, as far as why I linked to it, despite cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title which you guys decided to focus on, it is a great story about me, my background, and my facá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r. So it is great PR for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 company on its success and revenues, not to mention it being on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 front page of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 business section of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Sun Times. Despite what you guys decided to focus on, which was what, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title?... was that its a story on perseverence and dedication and what both can bring.

I'm sorry that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 only thing you guys decided to focus on and get out of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 entire story was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title.

Bamm: I've never been able to tell if someone is upset, happy, or being sarcastic when writing emails or any ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r form of communication on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Interent. AAMOF, I don't know a single person who can. So please don't make assumptions as to whecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r or not I'm being too emotional or emotional at all in my writings as anything ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r than seeing my face and hearing my voice would be a presumptuous claim.

Richard Bejtlich said...

Eric,

I have plenty of experience with newspapers.

If you don't want cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m to print something, you (1) don't tell cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m about it, (2) ask to speak off cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 record, (3) not publicize cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story once it's printed, or (4) specifically issue a counter-story once it's printed.

You promoted cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 front page of your Web site.

You can use my blog post as an example of what not to publicize. I did not (1) mention your name in my blog post, (2) link to stories from your post-arrest, "ex-hacker" past, or (3) shed light on certain parts of your corporate biography.

If "cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re's no such thing as bad press," you should be happy I had anything to say at all about your company.

Anonymous said...

*sigh*

I don't know what made me think that Applied Watch is a SIM (you may want to try a little harder at "making a point to not position yourself as such".

Eric: When people start writing things like "...when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 truth is you probably check our web site regularly, maybe hoping to find something you can post about in your Blog? ...", chances are, that's emotion, not logic speaking.

I apologize to everyone for us turning Rich's blog into a freaking slashdot forum.

Anonymous said...

yeah here's cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 thing about "not hiring hackers to do security work". Who ARE you going to hire?

There are no, and i repeat NO security experts (in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 true sense of that word) who have not had at least some hacker ties. No college on earth offers classes which can give you cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 real security knowledge. It comes from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 underground, and underground is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 only place to get it.

The world is full of consulting houses which charge unsuspecting businesses hundresd of thousands of dollars for security solutions performed by certified "never was, never will be a hacker". When we do penetration testing on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se companies cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are usually shocked at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fact that we broke through laughable defense in mere hours without anyone even noticing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 attack. True security takes true experts. Hacking something when you're 17 is not quite murder, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 knowledge gacá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365red is both infinitely superior to any ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r, and inifinitely more useful.

The idea of not hiring someone who can do a great security job, because cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y defaced a website 8 years ago is silly from any number of perspectives.

Anonymous said...

Amen, amen, amen!

This sort of attitude that things are so simple as whitehat / blackhat / (cr)hacker / defender, whatever, is silly and unproductive.

If you work in InfoSec, and you're actually worth a damn, you learned what you know somewhere, and you spent some time poking around, maybe in a sandbox you built, or maybe (regrettably) somewhere you shouldn't have. That's life. God help us if no one in this business ever touches a sploit or rattles a doorknob.

Must we bring up this again? (Cloak.c)

It's never so damn simple, people, and a blog with Tao in its title should be capable of being a bit more dualistic, don'tcha think?

Eric is hawking his wares on listservs and needs to ratchet it down, agreed. But character assassination is a bit much. He who is without sin, etc, etc.

Anonymous said...

He or now she is back. Now known as Alissa Valentina Knight and working according to "her" LinkedIn profile as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 CISO at Gennetech and leading product development for a cyber security vendor ISC8 formerly know. As Irvine Sensors which handles numerous classified government programs.....I wonder if cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se companies know who is on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir teams.

Anonymous said...

Alissa says on her profile, website(s) and bio that she is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 CISO at Gennetech but when contacted cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y denied this. Considering her web presence which links her to terrorist organizations would limit her ability to get employment in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 security arena. Perhaps that was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reason for adopting a new identity after her transformation from Eric Hines to Alissa Valentina Knight. It seems that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 only thing Eric did not change was social security numbers.