I thought 12 & 17 were pretty good ;-] From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, September 07, 2011 7:59 PM To: NT System Admin Issues Subject: Re: DigiNotar compromise
As with most things of this nature the gold nuggets are in the comments. #16 is the best. On Wednesday, September 7, 2011, Richard Stovall <rich...@gmail.com<mailto:rich...@gmail.com>> wrote: > Winner. > > On Wed, Sep 7, 2011 at 10:02 PM, Steve Kradel > <skra...@zetetic.net<mailto:skra...@zetetic.net>> wrote: >> I'll just leave this here. >> https://bugzilla.mozilla.org/show_bug.cgi?id=647959 >> >> (Top-posting always makes me feel dirty...) >> >> --Steve >> >> On Wed, Sep 7, 2011 at 6:26 PM, Jon Harris >> <jk.har...@gmail.com<mailto:jk.har...@gmail.com>> wrote: >>> Like the out sourcing of medical records transcription to India where the >>> out sourcing company had one of their employees take the records and post >>> them on the Internet for all to read? Out sourcing is still done and done >>> will little regard to security in some cases. Until both sides of the coin >>> are made to pay for stupid/criminal acts this will continue to make the >>> hackers rich and famous. I see little difference between an out sourcing >>> company and an SSL supplier in this regard. Not doing the due diligence >>> needed to be assured of a good supplier, or for an SSL supplier that the >>> purchaser is who they claim to be, then things like this will happen. >>> Companies to stop looking at cost first then consider what will happen. >>> Reversing the equation is what needs to be done. >>> >>> Jon >>> >>> On Wed, Sep 7, 2011 at 12:45 PM, Ben Scott >>> <mailvor...@gmail.com<mailto:mailvor...@gmail.com>> wrote: >>>> >>>> On Wed, Sep 7, 2011 at 12:09 PM, Ken Schaefer >>>> <k...@adopenstatic.com<mailto:k...@adopenstatic.com>> >>>> wrote: >>>> > At the margin, it will dissuade some people from using Verisign again. >>>> > And that impacts their bottom line. >>>> >>>> Apparently, not significantly. >>>> >>>> > Eventually, for those that really care, there will be a CA that offers >>>> > the highest >>>> > levels of security. Probably at a premium price. >>>> >>>> There's no rule that says that has to happen. It would appear that >>>> most people chose price over security, and so far that has generally >>>> meant that those who value security more are left without any really >>>> satisfying vendor. >>>> >>>> > There will always be some rogue operators. And there will always be >>>> > premium >>>> > operators that drop the ball on occasion. But generally, it will sort it >>>> > out. Companies >>>> > that used to be king (Nortel, RIM etc) will go by the wayside. Others >>>> > (Google, >>>> > Apple) will prosper. >>>> >>>> All I see is one set of poor choices being changed out for another >>>> set of poor choices. Call it the "circle of incompetence". I doubt >>>> it will get a cute Disney theme song, though. >>>> >>>> -- Ben >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to >> listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> >> with the body: unsubscribe ntsysadmin >> >> > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to > listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
