Quick Hits
Commentary
Commentary
Commentary
News
Commentary
CommentaryCommentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
Commentary
News
CommentaryQuick Hits
Commentary
Has there been any report as to what type of malware was used to exploit the POS machines? Also, how were the machines infiltrated?
In reply to: Type of Malware
It is an embarrassing situation. The level of security offered to the customers is very poor. In many cases pos systems are common windows based machine with a few defense systems that in many cases are not sufficient...
In reply to: embarrassing
Perfect analogy, and exactly my point summed up fantastically!
In reply to: Re: Great Article
Great points Corey! I don't see anything wrong with security by obscurity when used in conjunction with a secure system. By making your systems appear to be smaller targets you are essentially eliminating...
In reply to: Great Article
You are misunderstanding the phrase. 'obscurity' in this context refers to relying on secreting the details of the security mechanism. The big difference is that if you have a reason to suspect your security arrangements, ...
In reply to: Re: We rely on Security through Obscurity
We found in our recent independent research that hospitals, care providers and medical insurers experience twice as many internal security breaches in comparison to other sectors. As we are seeing more and more...
In reply to: Re: Exceptions to the rule?
Everyone who has a user account on any system relies on security through obscurity. Consider the user ID/password combination. One component (the ID) may or may not be obscure, but the second (the password)...
In reply to: We rely on Security through Obscurity
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: How A Little Obscurity Can Bolster Security
Great article here, Corey! Security by obscurity should only be used as a method to delay and/or discourage the attackers from compromising our security; nothing more. "Security by Obscurity is no security at all." I agree,...
In reply to: Re: slows down an attack -- so it helps
Sure, don't give anything away.Don't pick names easy to guess or commonly used. Passwords are just the final threshold.
However, if your domain can be enumerated, the ship has sailed.
Which is more important?
In reply to: Re: Security v. Obscurity
I can see that point. So many have relied ONLY on security by obscurity (which IS bad) for protection that it is probably good to hammer that idea out of a Infosec neophyte's head... However, I still think the more exprienced...
In reply to: Re: Security v. Obscurity
Tweet This
