--- On Sun, 12/27/09, [email protected] <[email protected]>
> > eyes is that CNN covered a college football coach
> quitting today instead of
> > spending the entire day on this story. And the
> Iranian protests, too - now
> > there's a much more significant story.
> That's because football and protests in Iran actually
> *matter*. ;)
It's the old SIEM saw - how do you find the data you really *need* to see? In
reality, most of your IDS alerts are as useful as your average router syslog
message - or less. Without a plan and some good technology you spend entirely
too much energy focusing on trivial crap (and still in the end miss the Big
One).
The Detroit Self-Immolater deserves more press than the college coach thing,
but not infinitely more. You're still infinitely unlikely to encounter an
airplane bomber, but you will lose the football pool.
-chris
-chris
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.
