RE: Bank Audit Best practices

["Gault, Brian" <brian.gault () greenwichtech com>]

My apologies. I meant Bank of America. You can reference
http://news.zdnet.co.uk/internet/security/0,39020375,2129330,00.htm if you
like concerning it's 13,000 ATM machines that were unable to dispense cash
when SQL Slammer hit. 

http://www.econedlink.org/lessons/index.cfm?lesson=EM21, dated today, says
that the merger b/w Bank of America and Nations Bank will produce the USA's
largest bank by the end of the year. Honestly, I don't keep up with the
banking industry, and who is who, or who is merging with whom, so again, my
apologies for any misquoted stats.

Hope this helps to set the record straight.

Brian G.

-----Original Message-----
From: "Roman Draconus <roman"@empire.securityfocus.com
To: pen-test () securityfocus com
Sent: 3/24/2004 11:28 AM
Subject: RE: Bank Audit Best practices

> just infected the bank's network, possibly resulting in loss of the
> bank's ATM machines (like SLAMMER did to the LARGEST bank in the 
> world, BANK ONE), DoS against some of the bank's mission critical 
> servers, and a whole ton of pain, heartache, lost production hours 
> and costs associated with any cleanup.

Just for clarity, could you please provide reference regarding the 
Bank One ATM claim. To my knowledge, the publically reported Banks 
affected were Bank of America and Washinton Mutual. 

Also, to clarify, Bank One is currently the Nations 6th largest bank, 
with Citigroup holding the No. 1 spot both nationally and 
internationally. Even after the expected successful merger with JPMC 
is completed, the combined entity will tenuously hold the No. 2 spot.

Just like to get the facts straight.

Thanks.

roman draconus

He who fights with monsters might take care lest he thereby become a
monster. And if you gaze for long into an abyss, the abyss gazes also
into you.
              -Friedrich Nietzsche, Jenseits von Gut und Bose(1886)



------------------------------------------------------------------------
---
You're a pen tester, but is google.com still your R&D team?
Now you can get trustworthy commercial-grade exploits and the latest
techniques from a world-class research group.
www.coresecurity.com/promos/sf_ept1
------------------------------------------------------------------------
----

---------------------------------------------------------------------------
You're a pen tester, but is google.com still your R&D team?
Now you can get trustworthy commercial-grade exploits and the latest
techniques from a world-class research group.
www.coresecurity.com/promos/sf_ept1
----------------------------------------------------------------------------