<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: From vulnerability to fraud, how hard is it?</title>
	<atom:link href="http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/</link>
	<description>Security research, news and guidance</description>
	<lastBuildDate>Thu, 09 May 2013 14:59:42 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Troy Hunt</title>
		<link>http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/comment-page-1/#comment-3235</link>
		<dc:creator>Troy Hunt</dc:creator>
		<pubDate>Wed, 24 Mar 2010 02:07:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.securityninja.co.uk/?p=1109#comment-3235</guid>
		<description>This is an excellent article which very clearly bridges the gap between website exploit and financial impact. For many people, it’s difficult to monetise the risk of website vulnerabilities and seeing the process laid out so clearly really brings the message home.

Regarding suggestions the resources you mentioned are amateurish, the real message here is that there are individuals out there with the audacity to offer services like these openly to the public domain. It shows how fraud itself has been commoditised to the extent that an entire sub-culture has emerged – rather publicly – with the intent of turning it into a service industry. That in itself is a fascinating observation.</description>
		<content:encoded><![CDATA[<p>This is an excellent article which very clearly bridges the gap between website exploit and financial impact. For many people, it’s difficult to monetise the risk of website vulnerabilities and seeing the process laid out so clearly really brings the message home.</p>
<p>Regarding suggestions the resources you mentioned are amateurish, the real message here is that there are individuals out there with the audacity to offer services like these openly to the public domain. It shows how fraud itself has been commoditised to the extent that an entire sub-culture has emerged – rather publicly – with the intent of turning it into a service industry. That in itself is a fascinating observation.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ethicalhack3r</title>
		<link>http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/comment-page-1/#comment-3036</link>
		<dc:creator>ethicalhack3r</dc:creator>
		<pubDate>Thu, 04 Mar 2010 17:10:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.securityninja.co.uk/?p=1109#comment-3036</guid>
		<description>It seems if I&#039;m not mistaken that the particular forum you used in your examples has now been shut down.</description>
		<content:encoded><![CDATA[<p>It seems if I&#8217;m not mistaken that the particular forum you used in your examples has now been shut down.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mr_Bonkers</title>
		<link>http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/comment-page-1/#comment-2860</link>
		<dc:creator>Mr_Bonkers</dc:creator>
		<pubDate>Thu, 11 Feb 2010 16:04:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.securityninja.co.uk/?p=1109#comment-2860</guid>
		<description>Excellent read!</description>
		<content:encoded><![CDATA[<p>Excellent read!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: d0s</title>
		<link>http://www.securityninja.co.uk/data-loss/from-vulnerability-to-fraud-how-hard-is-it/comment-page-1/#comment-2858</link>
		<dc:creator>d0s</dc:creator>
		<pubDate>Thu, 11 Feb 2010 15:50:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.securityninja.co.uk/?p=1109#comment-2858</guid>
		<description>Great read, thank you.</description>
		<content:encoded><![CDATA[<p>Great read, thank you.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
