Re: PCI DSS & Firewalls

[email protected] (Jim Seymour)
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <[email protected]>
Bill McGee <[email protected]> wrote:
> 
> Yikes!
> 
> Wouldn¹t it be nice if we all lived in Marcus¹ world?
[snip]

It'd be a damn sight nicer than living in the world in which we
currently find ourselves, where, due to vendor irresponsibility and
end-user cluelessness (encouraged by said vendors, IMO), the concept of
"network security" has become a joke.

> 
> In the meantime, we really ought to be helping folks move from WHERE THEY
> ARE to WHERE THEY NEED TO BE, ...
[snip]

That's pretty damn funny, considering how "folks" got to where they are
in the first place.

[snip]
> ... we really need to recognize that
> wide-eyed idealism, however well-intentioned, is never a reasonable
> replacement for dealing with the vagaries of the reality we actually
> inhabit.

What Marcus is promoting isn't "wide-eyed idealism," it's reality.
That reality being there's no such thing as "kind of secure."  It's either
secure or it's not.  You, and those who believe, or purport to
believe, as you do are promoting "good enough."  Well, half-way
measures are *not* "good enough," *never* have been "good enough" and
never *will* be "good enough."

Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.linxnet.com/contact/scform.php>.

_______________________________________________
firewall-wizards mailing list
[email protected]
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.