Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Comment Re:Oh, this sounds like a good idea... (Score 1) 209

In reality, the auditor typically has minimal technical competency, and is running a canned set of tools that throw out so many false positives that the reports are practically worthless -- or if followed to the letter would make a system fail to even perform it's function. Or in some cases even boot. They even may not have the a canned set of tools for the right OS in the first place, making the reports even more useless.

Universally true? No. But it's been true in my experience dealing with PCI auditors with one of the major credit card processors. The processors are interested in demonstrating compliance, which may or may not have anything to do with real world security or actual deep inspection of the security of the systems.

And yes, nobody, including the credit card processors, wants to take the blame or the responsibility. IT is overhead to them, which cuts into the bottom line -- therefore there's little to no interest in hiring people qualified (and with sufficient authority) to properly protect the systems in question. Not to mention the infrastructure investment to go with it.

PCI compliance tends to leave a false sense of security to organizations that don't understand IT in the first place.

Comment Re:hmph (Score 1) 131

Contemplate the state of your Windows box 17 years ago.

Can't do that personally, since I was running slackware Linux right about that time ... :-) (I think the beta was around before 1993, but close enough for slashdot posts.)

Comment Re:Obama - A template for future US politics? (Score 1) 1912

I was going to vote for Obama, but the scores of mindless drones has really turned me off. I'm off to vote in about 20 minutes, I think I'll throw my vote away on a 3rd party candidate.

Personally I was going to vote McCain prior to his VP pick, but I threw my vote in with the Libertarians since I don't want a religious fruitcake (i.e. Palin) so close to the white house. I didn't want Obama in the white house for numerous reasons but I just couldn't stomach voting for McCain. I think he shot himself in the foot with his running mate.

Slashdot Top Deals

The IBM purchase of ROLM gives new meaning to the term "twisted pair". -- Howard Anderson, "Yankee Group"

Working...