[LINK] Thales APEC security fiasco

[Rick Welykochy]

Bernard Robertson-Dunn wrote:

> APEC pass farce: it's no go
> Edmund Tadros
> August 28, 2007 - 2:20PM
> SMH
> http://www.smh.com.au/news/national/apec-pass-farce-its-no-go/2007/08/28/1188067091460.html
> 
> The security accreditation cards for the Asia-Pacific Economic Co-operation forum have stopped working, hours after the APEC Taskforce began issuing them.

[SNIP]

This fiasco makes a mockery of ISO 9001 Quality Accreditation as claimed by
Thales in their own brochure spruiking their large event security product.

http://www.adi-limited.com/blank.html?./content/docs/brochures/civil/8pp_apec_2007_brochure_april_2007_lowres.pdf

or

http://tinyurl.com/33k569

The link is to a PDF document entitled "Security Solutions for Critical
Infrastructure and Large Events". On page six read all about their
supposed quality certification.

I've worked in organisations with such certification and always found
it an ongoing joke. Kind of like having MCSE credentials :)

> The Herald has been told that there had been numerous problem with the APEC registration website run by Thales with many pages not correctly capturing the data.

Quality accreditation or not, how hard is it to get a web site correct
and then test it thoroughly these days? One really wonders.
"It's not rocket surgery!"

If you have under-qualified staff working on projects like Thale's,
no amount of ISO 9001 accreditation is going to help out of the
deep dark chasm dug by incompetence.

The Thales web site is running on Microsoft-IIS/5.0, which is quite an
old product, geared to MS Server 2000. But we all know that any quality
system eschews the use of IIS and related infrastructure for one very
good reason: THEY ARE INSECURE PRODUCTS!

I feel a foxymoron coming on.

cheers
rickw



-- 
_________________________________
Rick Welykochy || Praxis Services

I didn't have time to write a short letter, so I wrote a long one instead.
      -- Mark Twain