nolongerquine

nolongerquine

#SOURCEBoston One org was looking @ a $2mil solution to scan papers w/cardholder info. Can be solved for $0.50 with marker & whiteout

nolongerquine

#SOURCEBoston (Monthly) Reverse transaction letters sent by banks tend to include PAN, expiration, etc (sent via paper mail)

nolongerquine

#SOURCEBoston Echoing the emphasis on protecting data.._and_ the brand/reputation.

nolongerquine Ward Spangenberg

#SOURCEBoston @wardspan wants [us] to think about semi-static nature of PCI-DSS; quick, low $ changes; easy adaptation; & "good security"

nolongerquine Damon C

Shoulder surfing @dacort. *wave*

nolongerquine

#SOURCEBoston The question: "How much _does_ security cost me at the end of the day?"

nolongerquine Ward Spangenberg

At @wardspan's "Employing PCI Compliance Programs..." preso #SOURCEBoston

nolongerquine

#SOURCEBoston "Those of you who are vuln researchers will be fat, dumb, and happy...those securing (computers | networks) are screwed."

nolongerquine

#SOURCEBoston "After 20 years...the situation is beyond repair and it's getting worse."

nolongerquine

#SOURCEBoston "Maybe [code] is getting so complex, we can't actually see where the failure is."

nolongerquine

#SOURCEBoston "PCI is a diagnosis of a terminal disease."

nolongerquine

#SOURCEBoston "Instead of 'locking down' Linux or Windows, we should focus on tamper-proof micro-OS w/micro-browser"

nolongerquine

#SOURCEBoston Grim future...human optimism forces us to make these (security) mistakes.

nolongerquine

#SOURCEBoston Key phrase(s): "Continuing with _____ represents addt'l investment in a risky decision..."

nolongerquine

#SOURCEBoston Ranum makes reference to space shuttle disasters and Feynman's observations (http://bit.ly/x5k8T)

nolongerquine

#SOURCEBoston Management remembers what it asked, not the response.

nolongerquine

#SOURCEBoston There have been endless numbers of contractors who've received *ONLY* a slap on the wrist for data breach issues.

nolongerquine

#SOURCEBoston "You're falling at terminal velocity while arguing about whether you should have bought a more expensive parachute."

nolongerquine

#SOURCEBoston "The business to be in is forensic analyst or someone who sells lipstick for pigs."

nolongerquine

#SOURCEBoston There's a difference between taking, say, PCI seriously and taking *security* seriously.