> They're calling themselves a "security firm" (at least that's how everyone refers to them) and they engage in cyber-warfare against anonymous. Random acts of

> They're calling themselves a "security firm" (at least that's how everyone refers to them) and they engage in cyber-warfare against anonymous. Random acts of stupidity by individual actors that should know better do not qualify as cyber-warfare. > Having your mailserver compromised on that premise, during what was probably the first serious attack, disqualifies you from that game. I sincerely doubt that was the first attack on their infrastructure and applications. We're routinely attacked by targeted threats and we're even smaller than HBGary. > And by the way, how do you know their source code was not stolen or backdoored? I don't, but I will be asking about it when I speak to them, as will everyone else they speak to. Hopefully they will segregate the code from the Internet. > Excuse me? "Absolutely perfect security"? > This was not some minor breach into some peripheral webserver. 4.71GB of their E-Mail is on BitTorrent And what's the value of the information assets stored in that e-mail? Is it 4.71Gb of subscription reminders for icanhazcheezburger? What proportion of that mail is actually sensitive and unencrypted, or decryptable within a timeframe where the sensitivity is still relevant? This is the thing, it's easy to scream about volume, but the fact is that there's a lot of data to go through. We've already seen stuff leak out from it that realistically was not best placed to be sent around unencrypted, but the same would apply in any company that had their mail servers broken into, the mail stolen and then distributed across the Internet.