Security Still Not on Broadway

I was at a OWASP meetup yesterday, as usual a pretty successful event as it's always interesting to hear about current threats and trends on the Internet from real people in the flesh. It was the usual high level talks, with some new "in the cloud" angles, but the fun talk was Arian Evans' from WhiteHat Security. He talked about the "super hacker" profile and mentioned a bunch of real-world incidents. Very refreshing to get a grounding view, and if nothing else the audience got an idea of how hard it's to carry around $833 million in cash. What was not so refreshing was to hear that security is still low on corporations' budgets, and that the general consensus is that showing that you have taken steps to secure your organization, is more important that actually doing it. Not even with the current organized crime/governmental/extremists hacking levels is security taking the stage it deserves.

Rainforest Hack