Security Watch | Matt Hines » Admonishing security vendors

August 28, 2005 | Comments: (0)

Admonishing security vendors

TAGS: None

Last month I had a chance to have a chat with hackers beetle and Bruce Potter of the self described "non-profit think-tank" Shmoo Group at the DefCon Conference in Las Vegas. If you're not familiar with the Shmoo Group, they're a cadre of guys who take a close look at security issues and present what they find to the security community -- and these guys are definitely passionate about security.

During the Shmoo presentation at this year's DefCon, Cazz, a member of the group, presented an interesting segment on exploiting the exploiters. Cazz showed several vulnerabilities in security software, including the popular open source Wi-Fi software, Kismet, where he talked about three remotely exploitable vulnerabilities and also showed ways to evade the popular Metasploit and Canvas attack and penetration toolkits.

Looks like Roger A. Grimes is expanding that discussion in this week's InfoWorld, and I couldn't agree with him more. If you haven't read his security column, now is your chance to see him take enterprise security vendors with poor security practices to task.

Posted by Victor R. Garza on August 28, 2005 04:41 PM

RATE THIS ARTICLE: