Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Security Czar
Scott Granneman, 2006-03-23

In this column Scott Granneman takes the role of dictator of the security world and presents his ideas about mandatory reforms that would improve security for millions of people.

Comments Mode:
Security Czar 2006-03-23
Erik N
Security Czar 2006-03-23
Anonymous (1 replies)
Here here!!! 2006-03-24
Anonymous (1 replies)
Re: Here here!!! 2006-11-08
Anonymous
Security Czar 2006-03-23
Stonewall
Security Czar 2006-03-23
Wremes (1 replies)
Re: Security Czar 2006-03-31
Anonymous
Security Czar 2006-03-23
Mr. Negative (1 replies)
Re: Security Czar 2006-03-26
Anonymous
Let's go for it! 2006-03-23
assurbanipal (2 replies)
Re: Let's go for it! - Why? 2006-03-24
Anonymous
Re: Let's go for it! 2006-04-14
Anonymous
Security Czar 2006-03-23
Nekromancer (1 replies)
Re: Security Czar 2006-03-30
EasterNerd (1 replies)
Re: Re: Security Czar 2006-03-31
Mick
Security Czar 2006-03-23
infamous41md (1 replies)
Re: Security Czar 2006-03-23
Todd Knarr (1 replies)
Re: Re: Security Czar 2006-03-23
infamous41md
Hahah ok I'm just nitpicking here, but I think as far as not changing oil goes you do cause trouble for others. If your oil isn't clean more toxins get released into the atmosphere. Ok, but seriously though...
Not every infected computer is doing damage to others. Maybe some are used in DOS's, others are part of botnets, but it's not like they're all doing real damage. I suppose you can make arguments that they are sapping up bandwidth and therefore sapping up money and so on, but I guess my real disagreement with Scott is that we're attacking the wrong part of the problem. What are the underlying causes of almost all of these infected computers? Shoddy coding! Let's try and fix the code. For one, even the most rigorous security minded user can be completely owned by a 0day browser bug. How many people were owned by the wmf bug? Do you think that everyone was going to trust the patch by (forgot his name) and install it? I'm sure plenty of people didn't even know it existed. Making people get licenses is just not the right solution. Even if they do go through the motions, they can just completely ignore the crap and do as they please after.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/394/33376#33376
Security Czar 2006-03-23
Anonymous (1 replies)
Re: Security Czar 2006-04-14
The Finger
Security Czar 2006-03-24
Anonymous
Security Czar 2006-03-24
Anonymous
Security Czar 2006-03-24
Anonymous
Security Czar 2006-03-24
Craig S Wright
No mandatory training 2006-03-27
Michael Scovetta (3 replies)
Re: No mandatory training 2006-03-29
Anonymous
Re: No mandatory training 2006-03-29
Anonymous
Re: No mandatory training 2006-03-30
Anonymous
Yes! (except for one thing...) 2006-03-28
Penguinisto
Security Czar 2006-03-29
Anonymous
Security Czar 2006-03-30
Lunkwill
Security Czar 2006-03-31
Paul Stepowski
Security Czar 2006-03-31
FortHEX
Security Czar 2006-04-02
Anil B







 

Privacy Statement
Copyright 2009, SecurityFocus