You are absolutely right! I will not argue this point at all. The only
thing I will say is that product security is based on a process of
evolution. My statement was intended to indicate that it is customer
demand that drives the speed of that evolution.
No. Customer demand should play the *least* part in security evolution. The *main* thing that security analysts and security developers should focus on are the capabilities of the opposition, whomever they may be. Your foe is not your customer, and if he is he will not lead you toward pleasant waters. Again, your thinking is dangerous.
Don
http://www.7f.no-ip.com/~north_
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
