WebApp Sec mailing list archives

Re: PCI DSS Compliance


From: Ademar Gonzalez <ademar.gonzalez () gmail com>
Date: Thu, 15 Dec 2005 13:40:32 -0500

Thanks to everybody that answered, i appreciate it.

My comments, first I do not apreciate people/companies gaining
security intelligence on my network, less facilitating it for them.
Whatever might  be there for a hacker to find/exploit is also there
for the company doing the scan.

Second, having your site certified adds nothing to the site security,
in my experience 100% of compromised sites i have deal with where due
to application level exploits.

I'm aware most of you disagree with me, but then my bussines is not to
sell this certifications :-)

Regards.

ademar


Current thread: