Gary Thornock's Weblog

Deprecated: preg_replace(): The /e modifier is deprecated, use preg_replace_callback instead in /home/thornock/public_html/wordpress/wp-includes/formatting.php on line 74

Strict Standards: call_user_func_array() expects parameter 1 to be a valid callback, non-static method UltimateTagWarriorActions::ultimate_the_content_filter() should not be called statically in /home/thornock/public_html/wordpress/wp-includes/plugin.php on line 57

Marcus Ranum posted an article titled The Six Dumbest Ideas in Computer Security. His top six security mistakes:

1. Default Permit
2. Enumerating Badness
3. Penetrate and Patch
4. Hacking is Cool
5. Educating Users
6. Action is Better Than Inaction

He makes some pretty good points. A couple of my favorites:

• It is often easier to not do something dumb than it is to do something smart.
• If "Penetrate and Patch" was effective, we would have run out of security bugs in Internet Explorer by now.
• [B]uilding a system that is in constant need of repair means you will spend years investing in turd polish because you were unwilling to spend days getting the job done right in the first place.

No Tags