darkreadingman - Slashdot User

Submission + - Hackers Disagree On How, When To Disclose Bugs

Submitted by

darkreadingman

on Thursday January 04, 2007 @02:51PM

darkreadingman writes: "There's a growing rift among hackers and other security researchers as to how vulnerabilities should be exposed and how they should be disclosed to vendors and the public. Are current security research methods and disclosure practices actually putting users at risk? Some experts — and even some hackers — say they are. http://www.darkreading.com/document.asp?doc_id=113 737&WT.svl=news1_2"

Submission + - First-Person Account of Social Engineering Attack

Submitted by

darkreadingman

on Thursday November 30, 2006 @11:49AM

darkreadingman writes: "A penetration tester tells how he broke into a bank's network dressed as a copier repairman. Some good lessons here — many companies spend millions on network security, but don't teach their employees how to challenge a stranger in the building. Social engineering at the company site can be one of the most difficult attacks to defend. http://www.darkreading.com/document.asp?doc_id=111 503&WT.svl=column1_1"

Slashdot Top Deals