First, I want to excuse me for the lack of posts in the last 4 days, I had other things to do and had a shortage of time. So, the article that I’ll comment is 5 days old but I want to comment it anyway.<\/p>\n
There is an article <\/a>that I need to comment on. The problem with it is that he doesn’t focus on his subject, go everywhere and try to cover a wide question in a little article. The title is “Know your enemy<\/a>” — clich\u00e9. He writes on 3 main subjects: Companies resources (new network technologies), third world hackers (money as motivation) and others obscure ones (custom software and social engineering). There is what he said about the second subject and I want to comment on:<\/p>\n Should US companies worry about hackers in Russia and other countries? The problem is that he make too emphasis on the typical hacker of Hollywood. Really, he is not a threat. The real threats are the criminal groups. They begin to see benefits with cyber crimes and they exploit it. They exploit the internationalisation of the Internet and the lack of law applicability of many countries. This is the real problem. It’s true that the motivator is the money in this case too, but good luck to employ them after. I think that he talk about a minority of cases, and by doing so, he’ll not get rid of the real problem, the real danger, the criminal groups implication in the cyberspace.<\/p>\n It’s my 2 penny to the discussion.<\/p>\n [In addition to the post: 12 October 2004] “What’s the biggest threat to information security at the moment? <\/p>\n Schneier: Crime. Criminals have discovered IT in a big way. We’re seeing a huge increase in identity theft and associated financial theft. We’re seeing a rise in credit card fraud. We’re seeing a rise in blackmail. Years ago, the people breaking into computers were mostly kids participating in the information-age equivalent of spray painting. Today there’s a profit motive, as those same hacked computers become launching pads for spam, phishing attacks and Trojans that steal passwords. Right now we’re seeing a crime wave against Internet consumers that has the potential to radically change the way people use their computers. When enough average users complain about having money stolen, the government is going to step in and do something. The results are unlikely to be pretty.” Know you Enemy Does he really know them? First, I want to excuse me for the lack of posts in the last 4 days, I had other things to do and had a shortage of time. So, the article that I’ll comment is 5 days old but I want to comment it anyway. There is […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[56],"tags":[],"class_list":["post-182","post","type-post","status-publish","format-standard","hentry","category-security"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/182","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=182"}],"version-history":[{"count":0,"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/182\/revisions"}],"wp:attachment":[{"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fgiasson.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nHackers from countries where the economy is less developed than the US
\nare more motivated by money than by pride when they start trespassing
\non US companies – as opposed to US hackers, who are motivated more by
\npride than money. (There are many other ways that you can make money
\nin the US.)
\nAlso, money is a stronger motivator than pride. That’s why people
\nmotivated by money are more dangerous. Hackers are businesspeople [if
\nthey are motivated by money]. In most cases, they are probably just
\nhaving difficulties in their countries finding and exploring
\nopportunities to work.
\nIf a company that is hacked into can explore with a hacker his or her
\ntalents in a more peaceful way, the victim can only benefit. If these
\nhackers are businesspeople, they can be redirected by being offered a
\nbetter deal than the one they might get by creating pressure through
\nhacking.
\nI deeply believe in this point. It is hard, however, to generalise too
\nmuch because every case involves different kinds of people and
\ndifferent circumstances.
\nWhat security measures offer the best protection against hackers?
\nKeep the hackers occupied if you recognise them as a threat. This
\nmight be similar to what some countries have done with their nuclear
\nscientists – Russia, for example, keeps them under close supervision
\nand treats them well, but above all keeps them busy professionally.<\/p>\n
\n—————————————————
\nI just read Bruce Schneier’s <\/a>October blog posts. He talks about this subject the 4 October with Bill Brenner from SearchSecurity.com<\/a>. It’s interesting to see that I’m not alone to share this view. I know that many other people do too. There is the excerpt from his post<\/a>:<\/p>\n
\n———————————————–<\/p>\n","protected":false},"excerpt":{"rendered":"