HP: "We Haven't Been Hacked" ...is not a metric
“…most companies that are getting attacked right now will never know. Unless you have very sophisticated, self-defending, well-written code then your web applications are sitting ducks. What’s worse - you will probably never know until someone finds your customer’s data posted on a blog, and IRC channel, or fraudulent charges start showing up on people’s statements.”


