Re: SCADA

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 15 Apr 2009, Bill McGee (bam) wrote:

> And what, exactly, is 'reliable'? The only reasonable definition I can think of is one that hasn't been broken into 'YET'. Like has been said before, unless you disassemble your machine, embed it into a cement and glass matrix, and dump it in the ocean, there is no such thing as 'secure' - and even then... Everything else involves degrees of risk balanced with the need to actually conduct business.
>
> In spite of what some of the purists on this list might imply, security is a trade-off, and every naive administrator believes his/her network to be 'secure' until it isn't. The rest of us manage risk and try our best to reduce the cost of risk to a level below the value of the business being conducted. Our job as security professionals is to help organizations reduce that risk as much as possible. Anyone selling anything else is hawking snake oil.
>


I'm not sure that with many outside security that reliable equates with 
security in mind.  More often it equates with uptime, or time between 
reboots due to system hangs.  Point being, one can not simply ask how 
reliable is it, without adding more to the context of the questing 
evaluation.  "One man's garbage being another's treasure"...



Thanks,

Ron DuFresne
- -- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         admin & senior security consultant:  sysinfo.com
                         http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A  E838 B2DF AFCC 94B0 6629

These things happened. They were glorious and they changed the world...,
and then we fucked up the endgame.    --Charlie Wilson
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFJ8Ne/st+vzJSwZikRAhVPAJ0UBuLl+cB6y/y8fMh7ycMA1E8IFQCgsi9T
dd+Ky2EvbzvD1MtFQn3M410=
=RpJV
-----END PGP SIGNATURE-----