Mullen obviously likes to see his written word. If your admin team, or individual, can't keep the environment secure FIRE them. But oh, no....we can't do that can we? It's called a firewall people....for starters Lock down NetBIOS, UDP, SQL....everything but what is required. Patching is good and all, but if NetBIOS is open you can patch yourself till yer blue in the face....I'll see ya from the inside regardless. Even the illustrious MS clowns themselves can't hire the talent required to put on a good front.

How many IIS servers are exposed to the net that host only the default MS web page....tens of thousands, if not more. Companies think they're secure....cause their admins say they are (and it isn't because they have a clue). Say you're not secure and you look bad.....betting that it won?t happen to you.

Guess what....not everyone is capable of maintaining a computer environment, though MS wants you to believe they can. Making a cert easy enough for a primate without opposable thumbs to pass with absolutely no practical experience does not mean they should be hired or even considered. If you hire these Mickey Dees-Should Be's you deserve them. It takes dedication, imagination, skill, common sense (whoops, there goes the majority) and the desire for more than a paycheck...perhaps some pride in their efforts. These commercials that make people believe that they can go from janitor to MCSE in just a couple of months and collect their $55,000 start pay have diluted the talent pool so that users think they're techs and managers think all techs are worthless. I see MCSE on a resume and I think, "Trash Can". Well if ya wanna make the $$$ open a school to teach the MCSE cert courses....You'll have a line forming out the door, and like every other school out there you can produce crap techs and drive away in your $80,000 car.


[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/152/19197#19197