Re: Outsourcing Firewalls/Internet Security count

[Adam Shostack <adam () homeport org>]

Bennett Todd wrote:

| I've gotta be glad to hear about competitors who do things like that.
| Makes the rest of our jobs easier --- ``I don't have to run faster than
| the bear, I just have to run faster than _you_''. Competitors with poor
| security will lure potential attackers away from me. Hooray!


        Amusing thought, but the unfortuante reality is that attackers
are not a scarce resource; there are more than enough of them to
attack everyone. :)

        Fortunately, most of them are script kiddies, and can't
leverage their attack beyond the web server or other exposed service.
Fortunately for those who do firewalls, most skilled attackers will
avoid the firewall entirely, making your job safe.

Adam


-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume