<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.28.3">
</HEAD>
<BODY>
I just did a writeup of Heartland's data breach in 2009. They thought they were safe because they were in compliance.<BR>
<BR>
-----Original Message-----<BR>
<B>From</B>: Jim Philips <<A HREF="mailto:Jim%20Philips%20%3cbriarpatch.jim@gmail.com%3e">briarpatch.jim@gmail.com</A>><BR>
<B>Reply-to</B>: Atlanta Linux Enthusiasts - Yes! We run Linux! <ale@ale.org><BR>
<B>To</B>: Atlanta Linux Enthusiasts - Yes! We run Linux! <<A HREF="mailto:Atlanta%20Linux%20Enthusiasts%20-%20Yes!%20We%20run%20Linux!%20%3cale@ale.org%3e">ale@ale.org</A>><BR>
<B>Subject</B>: Re: [ale] How to hack a bank<BR>
<B>Date</B>: Wed, 28 Apr 2010 14:38:05 -0400<BR>
<BR>
<PRE>
On 04/28/2010 02:14 PM, William Fragakis wrote:
> For those of us not in the security field, interesting reading.
>
> <A HREF="http://snosoft.blogspot.com/">http://snosoft.blogspot.com/</A>
>
> wf
>
>
Yes, the social Web of Facebook and LinkedIn must be a true goldmine for
hackers. I have worked in financial services for about fifteen years.
Many of these companies believe that if they meet all the compliance
rules, they are necessarily secure. It's interesting that PDF's were the
vector here. At one company where I worked, they did everything they
could to block "suspicious" Web sites, but never bothered to warn people
about the dangers of PDF's.
_______________________________________________
Ale mailing list
<A HREF="mailto:Ale@ale.org">Ale@ale.org</A>
<A HREF="http://mail.ale.org/mailman/listinfo/ale">http://mail.ale.org/mailman/listinfo/ale</A>
See JOBS, ANNOUNCE and SCHOOLS lists at
<A HREF="http://mail.ale.org/mailman/listinfo">http://mail.ale.org/mailman/listinfo</A>
</PRE>
<BR>
</BODY>
</HTML>