[ale] How to hack a bank

[wolf at wolfhalton.info]

I just did a writeup of Heartland's data breach in 2009.  They thought
they were safe because they were in compliance.

-----Original Message-----
From: Jim Philips <briarpatch.jim at gmail.com>
Reply-to: Atlanta Linux Enthusiasts - Yes! We run Linux! <ale at ale.org>
To: Atlanta Linux Enthusiasts - Yes! We run Linux! <ale at ale.org>
Subject: Re: [ale] How to hack a bank
Date: Wed, 28 Apr 2010 14:38:05 -0400


On 04/28/2010 02:14 PM, William Fragakis wrote:
> For those of us not in the security field, interesting reading.
>
> http://snosoft.blogspot.com/
>
> wf
>
>    

Yes, the social Web of Facebook and LinkedIn must be a true goldmine for 
hackers. I have worked in financial services for about fifteen years. 
Many of these companies believe that if they meet all the compliance 
rules, they are necessarily secure. It's interesting that PDF's were the 
vector here. At one company where I worked, they did everything they 
could to block "suspicious" Web sites, but never bothered to warn people 
about the dangers of PDF's.
_______________________________________________
Ale mailing list
Ale at ale.org
http://mail.ale.org/mailman/listinfo/ale
See JOBS, ANNOUNCE and SCHOOLS lists at
http://mail.ale.org/mailman/listinfo


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.ale.org/pipermail/ale/attachments/20100428/067b61cf/attachment.html