Dailydave mailing list archives

Re: updating an icon


From: Jared DeMott <demottja () msu edu>
Date: Thu, 10 Aug 2006 17:25:36 -0400

At BlackHat the folks from Mandiant discussed some attacks that had been
fairly cleaver (and entertaining!).  If memory servers, they talked
about 3rd party development back doors, reshipping attacks to Africa,
penny stock inflation fraud, etc.  So the question is are those attacks
more or less sophisticated than Mitnicks TCP/IP sequence guessing
attacks?  You can't compare money today and 50 years ago without
accounting for inflation.  Should there by some sort of technical curve
for such comparison.  Further more, who really cares?  Crime is crime. 
But I guess the guys in incident response care. :)

dan () geer org wrote:
Forgive me if this is obvious (RTFM), but is there
any update to the iconic picture that purports to
show that skill required to threaten falls as tools
get better?

By iconic, I mean reprinted over and over and cited
sort of by everybody.  

2002 original document
http://www.cert.org/archive/pdf/02sr009.pdf

one example of the picture alone
http://www.processor.com/images/Editorial/fullsize/00886313.jpg

That is what I am asking -- is there an update somewhere
or, for that matter, argue with the original if you want.
Taking the picture at face value, the skill required should
have asymptotically reached zero a while ago, etc.

--dan

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave


  

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave


Current thread: