It sounds like Bruce is saying that due diligence (such as hard tokens) is not worth the expense or effort simply because it will not keep out a determined intruder? Why do we bother putting fences around secured buildings - it will most certainly not stop a determined intruder, he will simply climb over or break through it - what it does do however, and does very well, is keep out the majority of intruders that feel that the effort is not worth the gain - and at the very least it will slow down the determined intruder (and as you know - time is everything when trying to stop an intruder, a honey pot does not stop him, but does slow him down enough for you to formulate and effective block or counter strike.....). I am very disappointed in Bruce, ever since I read "secrets and lies" I have held his opinion in the highest regard but know I think he should stick to encryption - due diligence is obviously not his strong point....

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10694/30941#30941