>Not surprisingly, the one group of people who
>deserve the most blame get the least - security
>people. Thats right, security people.

Yeah, security people are often the losers who knuckle down when managers tell them "open a big hole through the firewall" and then sit back and moan about it. I apologize for not doling out the proper share of blame to the guys who are trying - and failing - to solve the problem. I've done that so much in other forums that I sometimes forget.

>The loyal citizens of Security are always
>crapping in your baseball cap about how this
>thing or that thing is insecure, about how
>there is a better way to do it.

Yup. Often there is! Sometimes there isn't.


>What security people never do is propose
>solutions, because they are far too afraid
>that some other bitchy Security citizen is
>going to poke a hole in their balloon.

You mean some bitch on website is gonna call them a "jackass" or something? ;)

Buddy, I don't know who you are because you chose to remain anonymous, but if you knew anything about who you're talking to you'd know that I've proposed a hell of a lot of solutions to a hell of a lot of problems. Sometimes they're good ideas, and sometimes they're bad ideas - but the thought that I'd be afraid to offer a suggestion for fear that some ankle-biting punk like you was going to poke a hole in my baloon - THAT is a laugh.

mjr.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/334/32048#32048