Comments for World Press Release.co.uk

Comment on Bejtlich on Silver Bullet Podcast by olson305chrisg

olson305chrisg — Wed, 25 Aug 2010 03:57:16 +0000

Network Security Monitoring meets Building Security In. Both disciplines give hope that the security professional of the future has a chance at fighting sophisticated threats. The podcast is worth the time to listen to gain insight from both Richard and Gary.

Comment on QuickTime Player Allows Movie Files to Trigger Malware Download by spywarevoid (spywarevoid)

spywarevoid (spywarevoid) — Sun, 01 Aug 2010 04:01:02 +0000

#QuickTime Player Allows Movie Files to Trigger #Malware Download -> http://bit.ly/cFcyyo

Comment on Dell Needs a PSIRT by Motorrad

Motorrad — Mon, 26 Jul 2010 04:47:05 +0000

It would be extremely helpful if product vendors like Dell not only create PSIRTs, as you suggest, but also join organizations that link PSIRTs together, such as FIRST.Org.

Having a PSIRT is a good first step, but if you don't have networking with other incident responders you're probably working in the dark (or, worse still, blindly following the guidance of corporate PR, who likely have no relevant experience in this particular area).

Comment on Dell Needs a PSIRT by Joe

Joe — Mon, 26 Jul 2010 03:55:00 +0000

Dude you got a virus!

Sorry, couldn't resist.

Comment on Dell Needs a PSIRT by Andy H.

Andy H. — Mon, 26 Jul 2010 03:44:03 +0000

More to the point Dell states in their response

"4. All industry-standard antivirus programs on the market today have the ability to identify and prevent the code from infecting the customer’s operating system."

Then why were they not checking all motherboards or have process in place to do so with "industry-standard antivirus programs?

Comment on Comments on Sharkfest Presentation Materials by stretch

stretch — Sat, 26 Jun 2010 03:51:33 +0000

For anyone interested, the "SPAN Out of the Box" video has been posted here: http://lovemytool.blip.tv/file/3783358/ Not sure about the other one.

Comment on FIFA and Gaza Attack Tweets Dump Backdoors by TrendMicro (TrendMicro)

TrendMicro (TrendMicro) — Sun, 06 Jun 2010 03:56:07 +0000

FIFA and Gaza Attack Tweets Dump Backdoors http://blog.trendmicro.com/?p=25179

Comment on FIFA and Gaza Attack Tweets Dump Backdoors by i60Vids (Ido)

i60Vids (Ido) — Sun, 06 Jun 2010 03:53:12 +0000

FIFA and Gaza Attack Tweets Dump Backdoors http://blog.trendmicro.com/?p=25179 (via @TrendMicro)

Comment on Forget Pre-Incident Cost, How Much Did Your Last Incident Cost? by The Ubiquitous Mr. Lovegroove

The Ubiquitous Mr. Lovegroove — Thu, 27 May 2010 08:09:10 +0000

And what about those enterprises that are yet to experience a note worthy incident?

Comment on Forget Pre-Incident Cost, How Much Did Your Last Incident Cost? by itinsecurity

itinsecurity — Thu, 27 May 2010 07:55:22 +0000

Well, sounds like a great idea. However, what makes you think it's easier to estimate actual loss, than to predict it?

In particular I am thinking about the last three items on your list:
Value of data, Value of brand, and whatever else you can imagine.

While it conceptually makes more sense, I don't quite see how it is going to be easier or better, given the "intangible unknowns" of the equation.