Saturday, May 10, 2008

TJX Breach Write-Up

Interesting write up on the beginning of the TJX breach:




1 comment:

Anonymous said...

They don't answer the "how" question because they have no clue. This is generally true of any interactions you'll have with the folks at Tizor. They clean up real nice and present a good image, but under the surface, they're all hollow.

Call up and ask them how they handle auditing of console activities, or people (dbas) SSHing into a server.