This kind of thing always confuses me. How can anyone assume any machine is NOT compromised already… Like… ever? You really have no way of knowing that a box i

This kind of thing always confuses me. How can anyone assume any machine is NOT compromised already… Like… ever? You really have no way of knowing that a box is not owned as soon as it has connectivity (and possibly even before that). I feel like many people have the idea that security is “these machines are good until we detect some intrusion”. But it seems like the more sane default is “every machine is compromised and I should never trust anything ever” if you take security seriously. Maybe the latter is gaining popularity, but I still feel like the former ideology is pretty prominent.