MemeStreams | MemeStreams Discussion

Create an Account

This page contains all of the posts and discussion on MemeStreams referencing the following web page: Talking with: Security Expert Mich Kabay. You can find discussions on MemeStreams as you surf the web, even if you aren't a MemeStreams member, using the Threads Bookmarklet.

Talking with: Security Expert Mich Kabay by Jeremy at 12:15 am EDT, Oct 22, 2003
Adaptive attackers, novice computer users, indifferent management ... it's no wonder our defensive mechanisms need continuous refinement. Norwich University ... has an information warfare laboratory where students do lab work on defensive countermeasures. ... Users don't take security seriously. Management does not take security seriously. ... We give people dangerous, unprotected tools and expect novices to install and configure them. ... electronic voting ... not hopeless, but it is very difficult. ... some of the COTS software* being sold should be qualified as beta versions ... fundamental designs are flawed.*
Link - Reply

RE: Talking with: Security Expert Mich Kabay
by Decius at 9:10 am EDT, Oct 22, 2003

Jeremy wrote:
] Adaptive attackers, novice computer users, indifferent
] management ... it's no wonder our defensive mechanisms need
] continuous refinement.

I must express suspicion of anyone who lists their CCISP after their PHD. Its a little like saying "I'm a medical doctor, Oh, and I'm ALSO certified to do CPR!!"

In general, "certification" programs that value what information you can memorize over your problem solving ability should be discouraged. Employers shouldn't be hiring for what you know, but how you think, and what you like to think about.