RE: Re: Exactly 500 word essay on "Why hacking iscool, so that Marcus changes his web site"

[Barrie Dempster <barrie () reboot-robot net>]

On Wed, 2005-09-21 at 13:50 -0400, Paul Melson wrote:
> So as network security becomes an integral part of IT practice (make
> no
> mistake, we're not an industry unto ourselves), will we or our peers
> be
> happy to see more regulation and more audit overhead because Immunity
> or
> Symantec or McAfee hired some hackers who weren't fully "retired" and
> they
> release the next big worm?

These things already affect us in other ways and it's only a matter of
time before they come into security more fully. Not that I like it -
this is fact as you say. However the point I was arguing against is that
security research is more bad than good, it isn't. The bad apples in any
area cause this sort of regulation - it isn't unique to security and
doesn't require a majority of bad apples, it just requires enough public
fear/awareness. We wouldn't expect financial consultants and researchers
to stop working because many of them have a bad rep, similarly we
shouldn't expect that from security consultants and researchers.

-- 
With Regards..
Barrie Dempster (zeedo) - Fortiter et Strenue

"He who hingeth aboot, geteth hee-haw" Victor - Still Game

blog:  http://reboot-robot.net
sites: http://www.bsrf.org.uk - http://www.security-forums.com
ca:    https://www.cacert.org/index.php?id=3

Attachment: smime.p7s
Description: