Trion Worlds customer database hacked, 'no evidence' credit card info stolen
20.05.12
@Joshua Przygocki
People like Felnor don't really understand the realities of this topic.
First, let's say a company hires a dozen people who's full-time job is data security. That's actually optimistic, since most IT people do more than one type of task and most companies don't have an IT staff that big. But I'll be generous. The truth is that if the company has any kind of customer base there are going to be dozens of people trying to beat that security. The good guys are always outnumbered.
Second, IT security is by its very nature more reactive than proactive. You can't build a system without vulnerabilities for the same reason you can't program an MMO without bugs. If you're in charge of security you are spending most of your time finding out what the bad guys have been doing recently and then finding ways to prevent your systems from being hit in that manner. In other words, the bad guys are always a step ahead.
Felnor, you might also argue that
Source: Joystiq