Re: Ok, so now we have a firewall, we're safe, right?

["Marcus J. Ranum" <mjr () ranum com>]

Paul D. Robertson wrote:
> But you almost have to use the events to sell your approach.  Done well,
> that's how you get buy-in for a security program

No, I think we need to start taking the high road. Security
practitioners have been too busy arguing about the color
locks on the barn doors* and trying to argue from a position
of weakness. It's stupid. It's not working. We need to just
be telling these CTOs:
"*Laugh* You Fscking MORON. If you had half of the IQ
of my horse P-nut you'd have had one of your minions
draw up a plan for securing wireless *BEFORE* you
bought the stuff. Where did you get your CTO credentials
anyhow, a Cracker-Jack box? What about 'Chief Technology
Officer' in your job description says you can be totally
incompetent about something so important?"

They're sensitive to ridicule and abuse. They're impervious
to clues.

mjr. 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards