3 ms·

I'd agree that this is mostly a PR problem; but for a security company, having your public site hacked is somewhat embarrassing. But it is humbling, since this

by olefoo 17y ago

I'd agree that this is mostly a PR problem; but for a security company, having your public site hacked is somewhat embarrassing. But it is humbling, since this was probably set up much better than the average linux webserver. If these guys can still be vulnerable then noone can be confident. When it comes to computer security we are for the most part working with very poor tools and even less understanding when it comes to building systems that are both tractable and secure.

ahlatimer 17y ago
No one should be confident. Given enough time and resources, practically any system will fall, typically due to human error (bad passwords being the biggest problem). I'd imagine more resources would be required to hack into a web server set up by a security company, but the rewards, in the form of publicity, for anti-sec are much greater. Anyone who believes they can have a "secure" system connected to the internet is largely kidding themselves. There are ways to minimize this risk, but there really isn't any way (as far as I'm aware) to completely eradicate it.