> From: mouss [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, August 23, 2000 4:10 PM > To: [EMAIL PROTECTED]; Meritt, Jim; Meritt, Jim; > [EMAIL PROTECTED] > Subject: RE: hacker hiring (was RE: Online Security Services and > Continuou s Risk Management > really? let me rephrase it. in many customer copanies, > someone has been > designed to buy a product. > This guy generally has something else to do, and will sign > where you ask > him, if you ever take the > time to give him a justification. I mean, he is not trying to > be convinced, > but onlyto get enough arguments > to defend himself if someone asks him. while there are great people > everywhere, there are far more many > "not great" people. I am not judging these guys, they may be smart, > skillfull, .. but victims of their company > process. Sometimes the acquisition is directed by the CFO or CEO or such, who is making the decision based upon who has the catchiest commercial, the prettiest ad in his magazine,... We call this "marketing" and there are a lot of people who make a living at it. > >Companies don't understand their pain. They want to, but the > doctor's that > >are explaining to them are talking at such a high level, > that they are > >very confused. > > I'm not sure we're talking about the same thing, so I'll try > again. Many > people think that a reasonable person will > maximize his gains and minimize his losses, in the absolute. Nah. Minimize maximum regret matches better to the observed decision methodology. > This is imply > untrue. In a given situation, you may > chose to simply mae your situation better, without trying to > maximimze it. > In other words, going to the top is not > necessary (this may be justified by the cost of going there!). > but once again, this is not imprtant to me... Or particularily accurate, it would appear. That is a direct follow - if it is not important to you then you would not have investigated it. > >>- there is no effective way to judge people. you can only ask'em > >>questions, hear'em > >>talking, ... you can't get inside their brain. > > > >Yes, you can ask questions starting at the high level and > work one's way > >down to the trivial. It is called top down approach. Many > programming > >courses speak of it.. :) > > you can try, but you can never check out... A very bold assertion: "never". > >>so, the tree components (customer, company, employee) of > the system can > >>hrdly follow > >>any rational model. Knowing that, you can hardly expect > that any of these > >>components > >>will follow a rational process.... "rational" to you. Quite probably not The opinions expressed above are my own. The facts simply are and belong to none. James W. Meritt, CISSP, CISA Senior Secure Systems Engineer at Wang Government Services, Inc. - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
