3 ms·
Oh dear. In one of Schneier's previous posts, he mentions graduate students learning the security mindset though analysing everyday products. One of these produ
by Maxious 14y ago
Oh dear. In one of Schneier's previous posts, he mentions graduate students learning the security mindset though analysing everyday products. One of these products was 24/7 video monitoring for elderly care... and the CEO of that company took offense to the security of his product being questioned, eventually pulling the security-through-obscurity card https://cubist.cs.washington.edu/Security/2008/02/10/security-review-quiet-care/ https://cubist.cs.washington.edu/Security/2008/02/10/securit...
Many of the other products such as OnStar have similar responses - security-through-obscurity requires the eternal vigilance of constantly googling your product + "security" ;)
- nnq 14y agoIf you're in the infosec business you should have a small army of bots looking for new results on google searches of "your-product security/exploit/..." and monitoring sec forums, exploit databases and other things as well, regardless of whether you do security properly or not. A 12hrs difference between someone finding news of an exploit and the info getting around to your client or you finding out 12hrs earlier from your bots and be already working on a fix or have it fixed might be the difference between being in and out of business...
- _cash_ 14y agoCan you give some info on how to setup some of these?