Re: Phishing E-mail Procedures

[Tim Doty <tdoty () MST EDU>]

On Thu, 2012-01-26 at 13:06 -0500, Valdis Kletnieks wrote:
> On Thu, 26 Jan 2012 17:09:10 GMT, "Doty, Timothy T." said:
>
> > I read the linked page and it is off target on every count
>
> *every* count?  You saying Marcus is wrong when he says "Default Permit"
> and "Trying to Enumerate Badness" are bad ideas? ;)

"Default Permit". He represents this as being normal in security. I
differ. He gives an example of application development. Correct, but it
has to do with application development, lack of education on security
approach. In short, it isn't something that security folks go preaching.

"Enumerating Badness". This is closer to being accurate, but in security
it is not preached, it is accepted. The major complaint is with
antivirus which is, of course, the example he used.

Guess what I do with Snort? I enumerate badness (detection rules are an
example of enumeration and with snort we don't try to detect what is
good, but what is undesired). Sorry, but I'm not giving up on snort.

Enumerating badness is bad in principle, but in the real world people
are trying to solve real problems with real tools. That includes
enumerating badness. I definitely disagree that it is one of the top 6
bad ideas in security.

Tim Doty