Sad reality: It's cheaper to get hacked than build strong IT defenses

Re:Sad reality: It's cheaper to get hacked than build strong... by paulddraper on Friday September 23, 2016 @11:56PM (#12569389)

From your points:

> Australia's DSD said that just patching stuff and using whitelisting would've prevented 75% of so-called APT's in their country. Throw in MAC-enabled Linux, OpenBSD, sandboxed (even physically) browsers w/ NoScript, custom apps in safe languages, VPN's by default, sanest configuration by default, and so on. Residual risk gets tiny. What I just listed barely cost anything.

That's a lot more invasive ongoing work than "add piece of hardware", or "add this DNS record".

[ Parent | on HN ]

Re:Sad reality: It's cheaper to get hacked than build strong... by nickpsecurity on Saturday September 24, 2016 @12:21AM (#12569446)

Add this whitelisting software with your main apps on the list. Install updates when available by clicking update. Done for 75% of it. Your admin using OpenBSD or Linux install instead of something else for backend is invisible to you. The developers writing apps withbone framework or library use a different one. I'm not seeing this invasive nature of easy stuff. Straightforward.

Seems more do given the number of companies with 1-5 IT people that do stuff like this. They just care, Google tech X plus security/hardening guide, and follow the advice. Apply patches, check logs on occasion. A little less apathy goes a long way.

[ Parent | on HN ]