|
I Can't Agree With This Analogy On the NetworkWorld Fusion site, Dave Kearns compares an XP SP2 security problem to a pretty dumb bank robber. Unfortunately, he's got it wrong. He's suggesting that a vulnerability that allows an attacker to make the Windows Security Center display false status information is "like a bank robber who, after tunneling into the bank at night, first cut the electricity then rewired the “time and temperature” display over the door so it ran on battery power", but that's not the correct analogy. What it's really like is a bank robber who, after breaking into the bank, first rewires the security alarm monitoring system so that the guards will always see an "all clear" indication. That robber will be able to come and go as he pleases from there on.
|