funsec mailing list archives

Re: APT definition


From: RL Vaughn <rl_vaughn () baylor edu>
Date: Mon, 11 Apr 2011 20:22:27 -0500

On 4/11/11 7:20 PM, Paul Ferguson wrote:
On Mon, Apr 11, 2011 at 5:19 PM, security curmudgeon
<jericho () attrition org>  wrote:


On Mon, 11 Apr 2011, Paul Ferguson wrote:

: On Mon, Apr 11, 2011 at 4:24 PM, Rob, grandpa of Ryan, Trevor, Devon&
: Hannah<rmslade () shaw ca>  wrote:
:
:>  APT relativity is such that for any attacker there exists a victim for whom the
:>  attacker is more advanced and/or persistent
:>
:>  https://twitter.com/#!/imaguid/status/57522111857700864
:
: Ha! I like that one.
:
: Generally I hate the term "APT" because the definition of "Advanced" is
: misleading.

As is "persistent".. sending a couple PDFs to employees over a one day
period got the foot in the door of RSA. That is not "persistent" as far as
anything I have seen or done.


Yes, but it *is* persistent as we have seen these same targeted,
socially-engineered attacks for years now.

- ferg


So, repeating the same message over and over again may eventually
build up an undeserved perception of trust?

It'll never work.

Randy
          _---_
        / _---_ \
       | |     | |
       |_|-----|_|
     /             \
    |      ( )      |
    |      | |      |
    |      |_|      |
     \_____________/

  This lock means you can
    trust me with your
      credit card


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: