It’s not often someone hits a pet peeve of mine dealing with security, but I bristled at one just now.
One of my tenets of security is to make sure to not believe there is a silver bullet or security panacea. I think we universally believe that.
But there are insinuations and beliefs that, in a way, are saying there really is a silver bullet. Most of these have to do with saying “Security measure X is not 100% effective, therefore it is useless/inefficient/expendable.”
I’ve seen this with Jericho Forum defenders who say the perimeter is porous now, which must mean the firewall is less efficient, which must mean we’re moving towards no perimeters. “What use is a perimeter defence with holes in it after all?”
Such a statement is analogous to saying, “I expect my security measures to be silver bullets.”
I don’t think I’ve stumbled downhill nearly that violently since breaking my leg sledding one winter…