hacking security forum

Re: [Full-Disclosure] Calcuating Loss

From: Clint Bodungen <clint@secureconsulting.com>
Date: Tue May 11 2004 - 11:11:14 EDT

How about when Micro$oft releases a bundled patch (cough cough MS04-011) to
fix several bugs and security holes (supposedly to help "minimize loss" from
these bugs and worms) only to find out that the patch itself has broken just
as many services as it fixed, taking down one's server for a few hours,
causing yet... more loss! ;-)

----- Original Message -----

> Loss?
>
> One of my biggest complaints is the way the industry "loses billions"
> whenever a virus or worm breaks out.
>
> I mean, securing and maintain your server is not a loss. Installing and
> updating your anti virus or IDS package is not a loss. All of these
> things should have been done anyway.
>
> If a server goes off line, I guess you could measure the revenue it may
> have produced as a loss, but technically, that is lack of income, not
> true loss.
>
> If you see someone complaining about all the money they lost doing what
> they should have been doing all along, I just see spin. And politics.
>
> M

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Tue May 11 12:15:38 2004

This archive was generated by hypermail 2.1.8 : Tue May 11 2004 - 13:05:07 EDT

Custom Search