Re: NematodeMS

[dan () geer org]

Jared DeMott writes:
-+------------------
 | As for .edu, lets put it this way, at a recent talk
 | the speaker made that point that .edus are weaker than
 | normal (that was a shock ...  not.), and than they're
 | fight against having to respond to police type taps due
 | to lack of funds .... gee, I wonder which nets will the
 | Chinese continue to target for launch points?
 |


In looking at the last 500 reports from the
Identity Theft Resource Center, and ordering
them by my own little classification, I get
the following differentiation of how the
losses of records occur.  Don't take this
as Gospel since it has not-yet-understood
artifacts of what does get reported and what
does not, but I think it does show something
you will find of interest.  I am working on
this, so take with a grain of salt...

business
----------------------
insider          68.1%
laptop           17.1%
exposed          11.1%
hacking           1.3%
missing           1.0%
breakin           0.8%
unknown           0.5%
found             0.0%
paper             0.0%
CD stolen         0.0%
hacker            0.0%
email             0.0%
skimming          0.0%

bank/finance
----------------------
insider          98.2%
laptop            0.9%
paper             0.5%
exposed           0.2%
hacking           0.1%
found             0.0%
missing           0.0%
CD stolen         0.0%
breakin           0.0%
unknown           0.0%
hacker            0.0%
email             0.0%
skimming          0.0%

gov/mil
----------------------
missing          33.2%
laptop           31.1%
exposed          10.6%
paper             9.6%
hacking           9.4%
insider           3.1%
CD stolen         1.9%
breakin           1.2%
hacker            0.1%
found             0.0%
unknown           0.0%
email             0.0%
skimming          0.0%

med/health
----------------------
missing          76.6%
laptop           15.2%
hacking           2.5%
exposed           2.0%
insider           1.7%
CD stolen         1.5%
paper             0.3%
hacker            0.2%
found             0.0%
breakin           0.0%
unknown           0.0%
email             0.0%
skimming          0.0%

educational
----------------------
exposed          42.3%
hacking          39.6%
laptop           12.1%
CD stolen         4.0%
missing           1.2%
insider           0.7%
breakin           0.1%
paper             0.1%
unknown           0.0%
hacker            0.0%
found             0.0%
email             0.0%
skimming          0.0%


--dan

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave