4 ms·

>> One can simply "check off the list" of attacks >> The more difficult/interesting problem is being future-proof

• eloff 6y ago
  I feel like you're not communicating well here. What does checking an attack off your list mean to you? If it means you're safe from it now and in the future, then obviously you're wrong. I feel like that's a strawman and not your actual argument though.
  • eyelidlessness 6y ago
    I read it as: defending against known vulnerabilities is well defined, defending against future exploits in the same vein is unknown. Pretty reasonable analysis unless there’s some doubt about the known part?
    • tptacek 6y ago
      The impedance mismatch here is that someone is talking about defending against "vulnerabilities" when what they're really defending against is "exploits". Defending against exploits is antivirus, not security. Spectre is a broad class of attacks; there are categorical defenses, but you can't verify them by running a single POC.
      • eloff 6y ago
        Yes, you've put your finger right on it, I think that's where he's coming from.