2024-12-22, 08:35 *
Welcome, Guest. Please login or register.

Login with username, password and session length
 
Pages: [1]
  Print  
Author Topic: Good Article (About Computer Security)  (Read 9905 times)
0 Members and 5 Guests are viewing this topic.
Phoenix
Bird of Fire
 

Team Member
Elite (7.5k+)
*********
Posts: 8815

WWW
« on: 2005-09-13, 03:18 »

http://www.ranum.com/security/computer_sec...ditorials/dumb/

I have to agree with everything he says here.
Logged


I fly into the night, on wings of fire burning bright...
Lopson
 

Elite
*
Posts: 1133

Still Going In Circles

« Reply #1 on: 2005-09-13, 10:27 »

This guy is right. And this "Hacking is Cool" fever... like he said, it will eventually pass (hopefully).
Logged

Tabun
Pixel Procrastinator
 

Team Member
Elite (3k+)
******
Posts: 3330

WWW
« Reply #2 on: 2005-09-13, 14:08 »

That's one thing I don't agree on. 'Hacking' is misunderstood anyway - what is useless (and harmful) is the scriptkiddie approach aswell as malignent cracking of systems. In such cases there's no quest for knowledge or improvement of security from a (possibly) altruistic and generalistic viewpoint, but one of malintended games, amusement at the cost of others or simply criminal activity. Turning that into a hype is counterproductive, much in the way in which it would be harmful to make it 'cool' to be an email-spammer.

That said, hacking - the way I understand it - is what intelligent and critical technicians do to test ICT security (in specific or in general). It is a known fact that many coders don't feel the need to subject their systems to rigorous testing, trusting in their conceptualization and execution of a project. Equally known is the fact that many, if not all, of the popular systems are riddled with flaws, and that most of the latter are found through the tests of 'hackers'.

Hiring some kid who may or may not be smart enough to have actually detected a flaw in your system, who may or may not have made a lucky guess, have ripped the work of someone else or have had access to inside information, is a moronic thing to do, and, IMO, is in no way related to the value of hacking. What should be questioned here, is the judgements made by corporations - should they spend tons of dollars on such lucky guesses? Or should they perhaps train their technicians to participate and follow 'hacker'-communities, and in so doing improve the systems they make and receive up-to-date testing results from the 'front line' of the security-industry?

It is an old mistake to shove all security-related testers in one big 'evil, dumb, useless, malignant' category, and it surprises me that this mistake is still so readily being made.
« Last Edit: 2005-09-13, 14:09 by Tabun » Logged

Tabun ?Morituri Nolumus Mori?
Phoenix
Bird of Fire
 

Team Member
Elite (7.5k+)
*********
Posts: 8815

WWW
« Reply #3 on: 2005-09-13, 16:56 »

I think the author's point was that the entire thinking needs to change.  There's nothing wrong with intrusion testing, but isn't it better to go forward using a "prevention first" attitude, so that the chances of an actual intrusion are minimized by design?  It's moving from a reactive stance (which is the current mode so many IT professionals are using) to a PRO-active stance on the DESIGN side, which I am completely in agreement with.  Build it right the first time (or as well as you can), and you reduce the chances of having costly and difficult fixes later.  Microsoft's business model is a good example of the WRONG way to do things being used for profit, and everyone is so used to it the RIGHT way to do things has fallen completely by the wayside.
Logged


I fly into the night, on wings of fire burning bright...
Tabun
Pixel Procrastinator
 

Team Member
Elite (3k+)
******
Posts: 3330

WWW
« Reply #4 on: 2005-09-13, 17:07 »

I agree - I simply don't trust the developers with the responsibility, and would always want to see active testing by the public, which will probably always do a better job at it. The reactive approach shouldn't be the only one, but it's preferrable over a defective (or worse; a seemably succesful) pro-active solution. What has to go is the 'let's make crap and sell it by monopolizing it' attitude, and better (intrusion) testing certainly would help there.
« Last Edit: 2005-09-13, 17:07 by Tabun » Logged

Tabun ?Morituri Nolumus Mori?
scalliano
 

Elite
*
Posts: 1095

Yup, that's me

« Reply #5 on: 2005-09-14, 00:39 »

I like this guy. The whole "penetrate/patch" and "early adoption" concepts are things that MS is certainly guilty of, and I'll bet my last quid that Longhorn will be no different in these departments. As the article says, you can't polish a turd, yet MS continue to do so, and we fall for it every time.

I think back to that video I saw of Win98 crashing on live TV many moons ago (snigger)
Logged

PSN ID: scalliano

The Arena knows no gender, colour or creed, only skill.
Lopson
 

Elite
*
Posts: 1133

Still Going In Circles

« Reply #6 on: 2005-09-14, 11:02 »

I thought it was the presentation of Windows 95. Live to CNN! Man i laughed som much when I saw that. Bill Gates was almost blowing up from shame. BTW scalliano, we fall for that trick every time because are forced to. There's no MacOSX for regular PCs (although in a near future it won't be hard to do so, since Apple is adopting the Intel's CPUs) and because Linux doesn't have enough support by the Software companies.
Logged

Moshman
 
Beta Tester
Vadrigar
**********
Posts: 615

Yarg!

« Reply #7 on: 2005-09-14, 23:09 »

Quote
There's no MacOSX for regular PCs (although in a near future it won't be hard to do so, since Apple is adopting the Intel's CPUs) and because Linux doesn't have enough support by the Software companies.

Apple sucks worse then a prostitute on Broadway on a Friday night.
I may hate microsoft, but I hate Apple worse. Yes if it wasn't for them we wouldn't have PCs. Their technology is so out of date it's not even funny. And the Apple cliches, drive me to the paddywagon.
« Last Edit: 2005-09-14, 23:12 by Little Washu » Logged

Lopson
 

Elite
*
Posts: 1133

Still Going In Circles

« Reply #8 on: 2005-09-14, 23:35 »

When i said this, I was just reinforcing scalliano's idea, not saying that MacOSX rules or that Linux rules.
Logged

Moshman
 
Beta Tester
Vadrigar
**********
Posts: 615

Yarg!

« Reply #9 on: 2005-09-15, 00:42 »

I know you were not saying that, I just wanted to express my veiw anout Macs that's all. Slipgate - Smile
Logged

Phoenix
Bird of Fire
 

Team Member
Elite (7.5k+)
*********
Posts: 8815

WWW
« Reply #10 on: 2005-09-15, 03:13 »

Whether Macs blow or not is irrelevent;  what is needed is some serious competition to Microsoft in the PC OS department.  Their stranglehold on the market has allowed them to produce an inferior product and bilk just about every computer user in existence in the process.  I get tired of the punks who say "Well you're using Windows, right?  So you have no right to bitch."  Those people can rot in hell.  The majority of people are forced to deal with Windows based machines, if not the home PC than at work.  Saying Linux is an alternative is laughable not because Linux is necessarily inferior in some way, but from a business standpoint the learning curve between Windows and Linux is problematic for most users, as well as the fact that just about every business computer in existence as Microsoft Office installed.  The cost factor of training employees on new programs and training tech staff on a new OS, when multiplied out, is staggering.  It's a simple matter of practicality at present.

If the Mac OS goes to the x86 platform and can run on standard PC hardware, then I say it's great because people don't HAVE to buy Windows, and (in theory) the Mac OS can be tailored to run any x86-based application.  This means a whole window opens (pun intended) for software developers to more easily port applications to Mac OS, or support could be completely native in the OS, meaning software designed to run on Windows could also run on a PC with Mac OS installed.  THAT is what I'm hoping for in the long run, because then Microsoft will lose a huge part of their monopolistic strategy since software that previously could not work on a Mac now could.  It will force Microsoft to do one or more of three things:  1)  Try to outmaneuver Apple and use their standard thuggish tactics to keep them from succeeding (this is expected),  2)  FIX their damned bugs and stop releasing products that get progressively more annoying and difficult for the user, 3)  Begin to lose market share to an alternative system.  Unless option 1 succeeds, I see nothing but benefit from this, provided things work the way I've suggested.
« Last Edit: 2005-09-15, 03:15 by Phoenix » Logged


I fly into the night, on wings of fire burning bright...
Lopson
 

Elite
*
Posts: 1133

Still Going In Circles

« Reply #11 on: 2005-09-15, 10:11 »

Apple hasn't stated that they would release MacOSX to normal PCs, but it will be inevitable with the entrace of the Intel CPUs to the Machintosh. I hope Apple can finish MS's dictactorial goverment over the PCs.
« Last Edit: 2005-09-15, 10:12 by [KruzadeR] » Logged

Tabun
Pixel Procrastinator
 

Team Member
Elite (3k+)
******
Posts: 3330

WWW
« Reply #12 on: 2005-09-15, 10:21 »

Actually, Apple does a pretty good job. I've worked with MacOSX for a wee while, and it certainly works great. I don't see how their products can be seen as outdated, unless you'd prefer something like 'Vista' on the nametag. My only serious problem with the Mac interface is that it is probably eating resources, much like the 'pretty modes' in Windows do - but without a really good way to turn them off. I've never been blown by a Broadway prostitute, but I won't take this as a recommendation then.
Logged

Tabun ?Morituri Nolumus Mori?
scalliano
 

Elite
*
Posts: 1095

Yup, that's me

« Reply #13 on: 2005-09-15, 14:56 »

Hell, I got rid of the tacky blue tripe off my XP ages ago. The ironic thing is that Service Pack 2 crashes my c
Logged

PSN ID: scalliano

The Arena knows no gender, colour or creed, only skill.
shambler
 
Icon of Sin
**********
Posts: 999

« Reply #14 on: 2005-09-15, 22:27 »

Anyone remember LINDOWS? I could have gotten into that, with a gental learning curve.
Logged
Pages: [1]
  Print  
 
Jump to: