Re: PCI DSS & Firewalls

[jseymour () linxnet com (Jim Seymour)]

Bill McGee <bam () cisco com> wrote:
> Yikes!
>
> Wouldn¹t it be nice if we all lived in Marcus¹ world?
[snip]

It'd be a damn sight nicer than living in the world in which we
currently find ourselves, where, due to vendor irresponsibility and
end-user cluelessness (encouraged by said vendors, IMO), the concept of
"network security" has become a joke.

> In the meantime, we really ought to be helping folks move from WHERE THEY
> ARE to WHERE THEY NEED TO BE, ...
[snip]

That's pretty damn funny, considering how "folks" got to where they are
in the first place.

[snip]
> ... we really need to recognize that
> wide-eyed idealism, however well-intentioned, is never a reasonable
> replacement for dealing with the vagaries of the reality we actually
> inhabit.

What Marcus is promoting isn't "wide-eyed idealism," it's reality.
That reality being there's no such thing as "kind of secure."  It's either
secure or it's not.  You, and those who believe, or purport to
believe, as you do are promoting "good enough."  Well, half-way
measures are *not* "good enough," *never* have been "good enough" and
never *will* be "good enough."

Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://jimsun.linxnet.com/contact/scform.php>.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards