> Making any decision based on this would be similar to examining warplanes for sign of bullets to determine which parts to reinforce. I think that’d be great

> Making any decision based on this would be similar to examining warplanes for sign of bullets to determine which parts to reinforce. I think that’d be great advice, if most current “enterprise software” deployments didn’t have bright flashing strobe lights directly mounted to the un armoured fuel tanks and cockpit blinking out “shoot here to kill” in Morse code. Once your attack surface doesn’t reveal multiple ways you can be trivially exploited using readily available tools like Shodan and metasploit, then maybe start looking at the places the bullets haven’t hit…