[ale] New worm destablized Internet

[Jonathan Rickman]

On Sat, 25 Jan 2003, Transam wrote:

> ATM security actually is rather bad.  This is the realy reason why there is
> a limit of $300-$1000 on the amount you can withdraw daily -- to limit the
> losses in case of a security problem.  (I worked for one of the larger vendors
> in that market, Stratus Computer, for five years.  I don't consider it
> appropriate for me to discuss most of the vulnerabilities.)

I can back you up on that one Bob. I've heard of, seen, and personally
experienced some of the silliest things in and around banking systems. The
stiff Federal regs are a symptom of the problem, not the cure.
Unfortunately the same is true for all the healthcare regs as well.

> In answer to "Who in their right mind would use Windows to manage your
> account?", well, lots of banks, some of them rather large.  Scary.
> My bank uses a highly hardened version of UNIX that I helped develop.

MS SQL has a considerable installed base. It's everywhere you turn and the
scary part is, more and more applications are making the switch every day.

--
Jonathan Rickman
X Corps Security
http://www.xcorps.net

_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale