This comes back to that great concept called 'Faith-based' Security (see Gunnar Peterson's post http://1raindrop.typepad.com/1_raindrop/2005/11/net_and_java_fa.html ), which is when people are told so many times that something is secure, that that they believe that it MUST be secure. Some examples: This is also neatly summarized by Brian Snow thusly: We will be in a truly dangerous stance: we will think we are secure (and act accordingly) when in fact we are not secure. -gp 1. Notes and links on "We Need Assurance!" paper |
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
