Why are companies that should specialize in cyber security, really really shit at cyber security? I've never had faith in privacy from Corporations, but they can't even cover their own asses.
1. Computer security is DIFFICULT.
2. Microsoft.
3. Defenders need to be perfect all the time. Attackers need only to be lucky once.
4. Connecting everything to a giant computer network is a bad idea. A very very very bad idea.
5. Microsoft.
6. Can't remember the ratio, but yeah, 1000 lines of code = 100 bugs, 25% to 50% of which may have security implications.
7. We can make it secure, but it would cost 400% more, and we would have a release every 3 years.
8. Microsoft.
@ParadeGrotesque @RickiTarr
Lol 😆 I’m so old government standards of a secure computer computer when I was learning:
a very deep hole within a guarded facility with multiple elevators with multiple security checkpoints with armed guards plus bio locks etc not connected to any other computer. 😁
@EVDHmn @ParadeGrotesque @RickiTarr even air gaps don't work so well anymore. Look what happens if you try to run your own nuclear centrifuges. Or connect a computer to change the biometrics on those locks.
@falken @ParadeGrotesque @RickiTarr
We could theoretically design work around solutions, to enhance it the security however with most; the result enlarges the footprint with more potential weaknesses of some sort, inevitably with more potential logistical shortcomings, hire more people?, more potential faults. It’s harder than
picking astronauts.
Makes wonder how emergent phenomena
In biology manages to keep the layers of the body’s communication secure.
@EVDHmn @ParadeGrotesque @RickiTarr it doesn't. Biological systems are robust against changes, where as human made systems tend to be brittle.
@rrb @falken @ParadeGrotesque @RickiTarr
https://www.cisa.gov
Code safe environments seems to be the umbrella at the moment.
@EVDHmn @falken @ParadeGrotesque @RickiTarr I like the secure by design pinky-promise.
Lots of supply chain attacks. You will see more. Have a project countering parts of that.
But, the feds no longer buying o days would do more
@falken @EVDHmn @ParadeGrotesque @RickiTarr
Governments invest hundreds of millions into keeping all of the computer systems insecure.
Read :
https://en.wikipedia.org/wiki/This_Is_How_They_Tell_Me_the_World_Ends