{"id":2052,"date":"2014-06-04T15:49:11","date_gmt":"2014-06-04T21:49:11","guid":{"rendered":"http:\/\/www.whitefirdesign.com\/blog\/?p=2052"},"modified":"2014-06-04T15:49:11","modified_gmt":"2014-06-04T21:49:11","slug":"trustwave-is-untrustworthy","status":"publish","type":"post","link":"https:\/\/www.whitefirdesign.com\/blog\/2014\/06\/04\/trustwave-is-untrustworthy\/","title":{"rendered":"Trustwave is Untrustworthy"},"content":{"rendered":"

When it comes to IT\u00a0security companies, what we see over and over is that they have little to no\u00a0concern for\u00a0security (and also often have little to no understanding of proper security practices). So it isn’t surprising that despite billions being spent on IT security<\/a>,\u00a0IT security continues to be in such poor shape. This leads to situation like the massive breach of Target’s systems last year. While that was big news, what didn’t get much attention was the company who declared Target compliant with standards for handling credit card transactions shortly before the breach, Trustwave. Trustwave has a history of declaring companies compliant shortly before they suffer major breaches and for being lax in their assessments<\/a>.<\/p>\n

We recently spotted another example of their highly questionable practices of Trustwave. We were contacted about doing a migration of a Joomla-based website still running version 1.5<\/a>, for which support ended in September 2012<\/a>. While taking a look at the website, we noticed a seal for Trustwave Trusted Commerce:<\/p>\n

\"Trustwave<\/p>\n

Considering that the website is running software that is no longer supported and therefore cannot be considered secure, we were curious to see if Trustwave was claiming it was secure. It would be quite\u00a0easy for them to find that the website is running Joomla 1.5 if they wanted to as the source code of every page on the website the following line is included:<\/p>\n

<meta name=”generator” content=”Joomla! 1.5 – Open Source Content Management” \/><\/p><\/blockquote>\n

If you\u00a0click on the seal you get this page:<\/p>\n

\"Trustwave<\/p>\n

At the top of the page Trustwave\u00a0proclaims that “Your credit card and identity information are secure.”, which they shouldn’t be saying for a website that is running unsupported software.<\/p>\n

As we looked closer we noticed the small text disclaimer at the bottom of the page were they say\u00a0“Trustwave Holdings, Inc. makes no representation or warranty as to whether [redacted]\u00a0systems are secure from either an internal or external attack or whether cardholder data is at risk of being compromised.”. So they are basically telling you that despite saying “your credit card and identity information are secure”, there not actually saying that at all.<\/p>\n

It is highly inappropriate for them to mislead the public like they are doing with this seal, but unfortunately our experience is that this kind of thing is considered acceptable in the security industry.<\/p>\n","protected":false},"excerpt":{"rendered":"

When it comes to IT\u00a0security companies, what we see over and over is that they have little to no\u00a0concern for\u00a0security (and also often have little to no understanding of proper security practices). So it isn’t surprising that despite billions being spent on IT security,\u00a0IT security continues to be in such poor shape. This leads to … Continue reading “Trustwave is Untrustworthy”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25,19],"tags":[],"class_list":["post-2052","post","type-post","status-publish","format-standard","hentry","category-bad-security","category-joomla"],"_links":{"self":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2052","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/comments?post=2052"}],"version-history":[{"count":3,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2052\/revisions"}],"predecessor-version":[{"id":2057,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/2052\/revisions\/2057"}],"wp:attachment":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/media?parent=2052"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/categories?post=2052"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/tags?post=2052"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}