Jamie Zawinski Quotes

A well installed microcode bug will be almost impossible to detect.

One bug in an SMTP server can open up the whole machine for intrusion.

Nobody should be too boastful or too proud about their security because there are people who have a major interest in cracking the security of networks, the security of companies.

Hackers rarely have full knowledge of the technology stack of a target.

Security guys break the Mac every single day. Every single day, they come out with a total exploit; your machine can be taken over totally.

When Target gets hacked, I don't hear people saying, 'Hey, was it Kohl's? Was it Wal-Mart?' It doesn't matter. There was a hack; you deal with it.

Every time WhatsApp has to fix a critical vulnerability in their app, a new one seems to appear in its place.

There is the possibility to be suddenly arrested for hacking.

It is a fairly open secret that almost all systems can be hacked, somehow. It is a less spoken of secret that such hacking has actually gone quite mainstream.

There are two kinds of big companies in the United States. There are those who've been hacked by the Chinese, and those who don't know they've been hacked by the Chinese.

I am well aware of the facts presented by numerous security experts on the many ways in which the United States' digital networks have come under siege by cybercriminals and under daily assault by hackers in league with various foreign governments.

There are two types of companies in the world: those that know they've been hacked, and those that don't.

The FBI has built up substantial expertise to address cyber threats, both in the homeland and overseas. Here at home, the FBI serves as the executive agent for the National Cyber Investigative Joint Task Force (NCIJTF), which joins together 19 intelligence, law enforcement, and military agencies to coordinate cyber threat investigations.

Attacks on Internet sites and infrastructure, and the compromise of secure information, pose a particularly tricky problem because it is usually impossible to trace an attack back to its instigator.

Penetrating a company's security often starts with the bad guy obtaining some piece of information that seems so innocent, so everyday and unimportant, that most people in the organization don't see any reason why the item should be protected and restricted.

U.S. computer networks and databases are under daily cyber attack by nation states, international crime organizations, subnational groups, and individual hackers.

I see beauty in the future of the Internet, but I'm worried that we might not see that. I'm worried that we are running into problems because of online crime. Online crime is the one thing that might take these things away from us.

Protecting yourself is very challenging in the hostile environment of the Internet. Imagine a global environment where an unscrupulous person from the other side of the planet can probe your computer for weaknesses and exploit them to gain access to your most sensitive secrets.

We want to detect malware, regardless of its source or purpose. Politics don't even enter the discussion, nor should they. Any malware, even targeted, can get out of hand and cause 'collateral damage' to machines that aren't the intended victim.

Hackers often describe what they do as playfully creative problem solving.

From a security perspective, if you're connected, you're screwed.

I was one of those kids who took apart their toys to see how they work, just to see what they were made up of.

I get hired to hack into computers now and sometimes it's actually easier than it was years ago.

A log-in simulator is a program to trick some unknowing user into providing their user name and password.

Most of the computer compromises that we hear about use a technique called spear phishing, which allows an attacker access to a key person's workstation. It's extremely difficult to defend against.