3 ms·
Adding snake oil usually adds more attack vectors rather than removing them. Look at all the "endpoint protection" and AV exploits surfacing almost every week.
by thesimon 6y ago
Adding snake oil usually adds more attack vectors rather than removing them. Look at all the "endpoint protection" and AV exploits surfacing almost every week.
- outworlder 6y agoYes. Security vendors have to add a bunch of snake oil products. If they just did "consulting" and trained the staff against social security attacks, and improved a company's policies, how could managers that authorized the expense justify it? Where's the shiny "product" that "keep us safe"?"Do you mean we have to periodically expend money to keep ourselves safe? I'll go with Vendor B, they have a blockchain-based Machine Learning tool that's going to safeguard us against current and future threats!"
- zentiggr 6y agoThanks now my skin's crawling again from the all too familiar cesspool feeling. Salesmen (external or even worse internal) convincing inexperienced CTOs or VPs that they need <this exact software> regardless of any real world factors... These are the people I would throw out with their own bathwater.