[funsec] How the media just don't get it

[Dude VanWinkle]

On 4/19/06, David Lodge <dave at cirt.net> wrote:
> One of my contacts in the physical security world passed this article on
> to me:
> http://www.timesonline.co.uk/article/0,,2-2135302_2,00.html
>
> Normally I'd ignore such a poorly researched article, but this has come
>  from one of the UK's major broadsheet newspapers...
>
> I'm interested on the price list on the second page of the article, as
> I've never really messed around with botnets - how viable are these prices?
>
> Regular credit card number: $1
> Credit card with 3-digit security code: $3-$5
> Credit card with code and PIN: $10-$100
> Social security number (US): $5-$10
> Mother?s maiden name: $5-$10
>
> $5-$10 seems a bit much just for a mother's maiden name! Especially as
> it's a lot more than that for a credit card number.


The price is based on difficulty to obtain. You know what a cc
transaction looks like, and can filter for it. Can the same be said
for mothers maiden name? Also, one can be used for purchases, can the
same be said for loans?

BTW, mothers maiden name is discriminatory towards orphans, but I took
a lesson from them: you can make one up. Treat your MMN as a passcode,
that doesnt have to actually reflect reality.

-JP