RE: [fw-wiz] Transitive Trust: 40 million credit cards hack'd

From: Behm, Jeffrey L. (BehmJL_at_bvsg.com)
Date: 06/21/05

  • Next message: Paul Melson: "RE: [fw-wiz] Transitive Trust: 40 million credit cards hack'd" 
    To: "Paul Melson" <pmelson@gmail.com>, "Marcus J. Ranum" <mjr@ranum.com>, "David Lang" <david.lang@digitalinsight.com>
Date: Tue, 21 Jun 2005 08:29:13 -0500

    And you (and others) assume there's only two runners.

    I still think I'll make an attempt to out run the bear and
    be as tough a target as I can afford, and hope the bear is
    smart enough to pursue the easy targets.

    The point is, don't make yourself the _easy_ target, when there are
    things you can do that the other (easier targets) aren't doing.
    When there are enough bears and few targets, everyone will get
    attacked, but don't lightly toss aside the benefit of making
    yourself as hard a target as you can afford. Right now, there
    are still plenty of honey-soaked targets for the bears to enjoy.

    I'm not necessarily saying this is a completely fail-safe way to
    secure your environment, but from what I have seen of other
    environments, at least the honey isn't dripping off you and
    leaving a trail for the bear to easily follow. Let it drip off
    the other guy(s).

    Jeff

    -----Original Message-----
    From: Paul Melson

    The problem with that strategy being, you assume that there's only one
    bear.

    PaulM

    -----Original Message-----
    True, Marcus, but not everyone _does_ use 2 factor auth. So, at this
    point,
    it can be effective. You don't gotta outrun the bear, just the guy next
    to
    you.

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Paul Melson: "RE: [fw-wiz] Transitive Trust: 40 million credit cards hack'd"

    Relevant Pages

    • Re: [fw-wiz] Transitive Trust: 40 million credit cards hackd
      ... You don't gotta outrun the bear, ... attacking tokens and other OTP schemes requires a whole different ... So long as there are plenty of easy targets which do NOT require a better ... rather to protect *us*, we will have a revolt on our hands:) ...
      (Firewall-Wizards)
    • Re: [fw-wiz] Transitive Trust: 40 million credit cards hackd
      ... but that of your new born babies. ... outrun the other guys, but some of your babies might get eaten. ... > be as tough a target as I can afford, and hope the bear is ... > things you can do that the other (easier targets) aren't doing. ...
      (Firewall-Wizards)
    • Re: Fuck, fuck, fucking fuck
      ... Bear writes: ... new pc out of donated spares. ... Why not buy a new one that's been handled and build in a proper ESD safe ... environment, rather than a bunch of different and potentially flaky ...
      (uk.rec.motorcycles)
    • Update on American Eskimo
      ... Bear had made some progress over the past few months. ... incident last week where my wife was trying to clean something off ... I don't blame the dog, but it worried my wife a bit. ... workable but Bear needs a quiet environment and a family with an ADHD ...
      (rec.pets.dogs.behavior)
    • Re: Why I Hate The Daily Show
      ... his comedic skills aren't reaching you. ... threw up too many easy targets for nearly a decade. ...
      (rec.sport.football.college)