Re: Botnets, IRC servers and firewalls?

[Paul Robertson <proberts () patriot net>]

On Thu, 5 Feb 2004, Gadi Evron wrote:

> > Most consumers are so unprotected (and ignorant,
> > though that's not their fault) it's terrifying.
>
> Whose fault is it than? :)

1.  The attacker's faults for attacking.
2.  The information security community for not ensuring they get the
protection they need.
3.  The vendors for not providing applications/platforms which take
security into account
4.  The service providers for not agressively fixing their customers.

#2 includes everyone on this list- We're the "professionals" here when it
comes to protective information security- and we haven't done nearly
enough to fix this.  It's the main reason I did the
www.personalfirewallday.org site, and it's why I'll be continuing to
update the site and try to raise the advocacy bar moving forward.  It
ISN'T the consumer's fault because we haven't even let them know *how
much* of a problem they have.

It's one thing to call the consumers stupid, and another thing entirely to
do something about it.  I don't mind if folks want to support my approach
or do something positive that they think is more effective.  I do mind
when we all sit back, throw our hands up and say how bad things are
without trying to fix it.  It's our profession, and that makes it our
responsibility.

It doesn't have to be our fault to be our responsibility.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
proberts () patriot net      which may have no basis whatsoever in fact."
probertson () trusecure com Director of Risk Assessment TruSecure Corporation
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards