funsec mailing list archives

Re: Foiled terror plot aboard Northwest Flight 253 sparks strict security rules for air passengers


From: chris () blask org
Date: Sun, 27 Dec 2009 11:18:55 -0800 (PST)

--- On Sun, 12/27/09, Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu> 

eyes is that CNN covered a college football coach
quitting today instead of
spending the entire day on this story.  And the
Iranian protests, too - now
there's a much more significant story.

That's because football and protests in Iran actually
*matter*. ;)

It's the old SIEM saw - how do you find the data you really *need* to see?  In reality, most of your IDS alerts are as 
useful as your average router syslog message - or less.  Without a plan and some good technology you spend entirely too 
much energy focusing on trivial crap (and still in the end miss the Big One).

The Detroit Self-Immolater deserves more press than the college coach thing, but not infinitely more.  You're still 
infinitely unlikely to encounter an airplane bomber, but you will lose the football pool.

-chris

-chris


      

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: