4 ms·
Why not? All you have to do is point to one particular company whose systems have not been verifiably breached after having resisted actual attempts.
by snoshy 6y ago
Why not? All you have to do is point to one particular company whose systems have not been verifiably breached after having resisted actual attempts.
- someguydave 6y agomost attacker groups would be unlikely to share that result
- imoverclocked 6y agoChallenge accepted? Just because known attempts have failed doesn’t mean the unknown ones have too.
- WaitWaitWha 6y ago> one particular company whose systems have not been verifiably breached The unknown unknown. How can you be sure all the "resisted actual attempts" been even detected?
- deleted 6y ago[deleted]
- not2b 6y agoYou've changed the requirement. To prove a company hasn't been breached, you'd also have to prove that there hasn't been a breach that hasn't been detected (so breached, but not verified). Any given target might already be quietly owned by some state actor or corrupt insider with allies on the outside.
- justinclift 6y agoSeveral places probably would have met those goals... ... right up until the SolarWinds hack became public. The point being, provable "we've never been breached" seems to have a way of turning out to be wrong. :/