I see your point, but if a burglar developed a new tool or technique that made it possible to defeat the "protections" the door provided (e.g. locks, hinges, solid wood, etc.) then who is to blame? We certainly can't hold the builder responsible for the actions of some miscreant.
The challenge is that not everyone is a security professional and not all products are designed to intrinsically be protected from any type of threat that may be posed.
Bottom line is if someone wants to get into your house badly enough, they will do it regardless of the elaborate controls you put in place. To fault the homeowner for not investing enough money to protect his assets or the builder for installing the doors that were breached is ludicrous.
From a corporate perspective, where application and network availability are of critical importance, a White Night program has the same effect as a malicious program.
Left to propagate unchecked it will spread across the network in the same manner as the malicious program, and cause the same level of incident handling and remediation work to resolve.
A better alternative is for corporations to put into place efficient and repeatable patch management processes that effectively prioritize and distribute patches to the endpoints within thier network. While this might not stop a zero-day exploit from having some effect, it will help to keep poorly-constructed operating systems and applications as secure as possible.
Slashdot Mirror
I see your point, but if a burglar developed a new tool or technique that made it possible to defeat the "protections" the door provided (e.g. locks, hinges, solid wood, etc.) then who is to blame? We certainly can't hold the builder responsible for the actions of some miscreant. The challenge is that not everyone is a security professional and not all products are designed to intrinsically be protected from any type of threat that may be posed. Bottom line is if someone wants to get into your house badly enough, they will do it regardless of the elaborate controls you put in place. To fault the homeowner for not investing enough money to protect his assets or the builder for installing the doors that were breached is ludicrous.
From a corporate perspective, where application and network availability are of critical importance, a White Night program has the same effect as a malicious program. Left to propagate unchecked it will spread across the network in the same manner as the malicious program, and cause the same level of incident handling and remediation work to resolve. A better alternative is for corporations to put into place efficient and repeatable patch management processes that effectively prioritize and distribute patches to the endpoints within thier network. While this might not stop a zero-day exploit from having some effect, it will help to keep poorly-constructed operating systems and applications as secure as possible.