Thursday, December 4, 2014

CISSP (Certified Insecure Sony Server Protocols)

MD5 hash: f46e64c568bd8816a2ca95835e2a2584
SHA-1 hash: e8da4dd2400ef4fc931a30625d8be59bf3a10eea

Well, now we know the recipe for the perfect crime: Have a 3 to 1 ratio of security executives over the people that are actually responsible for implementing and maintain said security. This, as reported by Fusion in this article: http://fusion.net/story/31469/sony-pictures-hack-was-a-long-time-coming-say-former-employees/ seems to be the template for success if you want a multi-billion dollar company to be completely pwned. But you don’t have to be a multi-billion dollar company to have this level of security, all you really have to have is an ability to pay ridiculous salaries to a few people who know very little about what they are managing, hire a few folks that actually do know what they’re doing, then underfund and require security to take a backseat to “productivity”. Boom, now you’re ready for the big time!

Now if you take this formula and apply it to practically any other business unit you can imagine, in any industry, do you know what you will get? Yep, you guessed it, complete and utter failure (excluding government agencies, which practically all of them excel at this!). And why is this? Well, most all of us know this is a self-answering question.

Again, using Sony as an example, when they make a movie, of course there are the executives making a lot of the decisions on the basic path of how making a movie will take, and while we might not all agree with their course, you can damn sure bet they are using their experience in making these calls. Sure, it may harm the storyline for some, but they are thinking of the bigger picture, making a marketable, money making movie, in other words, doing their job. But once those choices are made, they will spare no expense to make sure that all the assets, like good producers, directors, screenwriters, actors, effects groups and crew are in place to make this happen.

Now imagine a world in which security is treated with such a success oriented respect… and the irony is, the template for this success is actually a key part in Sony’s business model.

Oh the irony…


No comments:

Post a Comment