Quote

If you accept that security is a process, and if you can eliminate the human interaction or intervention in that process by automating more, that is a good thing.

This will surprise some of your readers, but my primary interest is not with computer security. I am primarily interested in writing software that works as intended.

One common puzzle for the security-minded is how to work with confidential data on the road. Sometimes you can't bring your laptop, or don't want to. But working on somebody else's machine exposes you to malware and leaves behind all kinds of electronic trails.

Most people assume that once security software is installed, they're protected. This isn't the case. It's critical that companies be proactive in thinking about security on a long-term basis.

If you wanna know how not secure you are, just take a look around. Nothing's secure. Nothing's safe. I don't hate technology, I don't hate hackers, because that's just what comes with it, without those hackers we wouldn't solve the problems we need to solve, especially security.

It is a fairly open secret that almost all systems can be hacked, somehow. It is a less spoken of secret that such hacking has actually gone quite mainstream.

I have some security that could protect me against provocations but of course there are more terrible actions that could not be stopped by any security.

Security is an attempt to try to make the universe static so that we feel safe.

It's simply unrealistic to depend on secrecy for security in computer software. You may be able to keep the exact workings of the program out of general circulation, but can you prevent the code from being reverse-engineered by serious opponents? Probably not. The secret to strong security: less reliance on secrets.

When you think about things like power efficiency or performance or Internet connectivity as major technology areas where you have multiple investments, multiple products - security is like that.