News for hackers. Stuff that matters.

A comment on Defenders think in lists, attackers think in graphs (2015). Parent comment

Re:Defenders think in lists, attackers think in graphs (2015) by xyzzy123 on Saturday August 24, 2024 @07:58PM (#41342980)
If you can't do checklists though, you can't do anything else.

All activities have lists and recurring calendar entries at their heart.

You have to regularly show up and do the things.

I agree that deeper / better approaches are required during the "do the things" steps.

[ Parent | on HN ]
Re:Defenders think in lists, attackers think in graphs (2015) by yodelshady on Sunday August 25, 2024 @04:55AM (#41345700)
Right, I think the industry is too self-critical at times.

I onboarded a new client recently, and within five minutes of guessing a Wi-Fi password I had sensitive financial data using stock tools. Anyone with physical access to the office could do the same. Contrast an existing client, after a month of trying and writing custom shellcode loaders, spear phishing campaigns, my entire team had... some graduate CVs.

Really, you're saying that because the NSA could probably do a better job with the latter than us by intercepting and hardware-hacking networking gear, that no value has been provided?

[ Parent | on HN ]