Cory Doctorow Quotes

We will stop 99 per cent of the attacks. But one per cent of attacks might get through and that is what I am saying.

People often represent the weakest link in the security chain and are chronically responsible for the failure of security systems.

If you don't fix latent failures in your system, you're asking for trouble.

Perimeter defense may not matter if the enemy is inside the gates.

There's always some potential vulnerabilities in any system.

If you're going to fail, you'd rather fail early than fail late in general.

The fact that this highly classified information of very, very important people in many cases was so poorly protected demonstrates that cyber security is just one more area where the Obama administration has failed.

I think that all services will have downtime. No matter how much you prepare, have redundant systems, or audit, there will periodically be a black swan event that is completely unlike whatever you've experienced before. It even happens to Google!

What happens with smaller businesses is that they give in to the misconception that their site is secure because the system administrator deployed standard security products - firewalls, intrusion detection systems, or stronger authentication devices such as time-based tokens or biometric smart cards. But those things can be exploited.

I get hired by companies to hack into their systems and break into their physical facilities to find security holes. Our success rate is 100%; we've always found a hole.

Breaking into a system or exposing its weaknesses is a good thing because truth and knowledge must win out.

Finding out exactly what went wrong is key toward preventing future debacles.

A computer shall not harm your work or, through inaction, allow your work to come to harm.

There are security risks not only from information falling into the wrong hands, but also from information failing to find its way into the right hands. The government’s current approach to protecting classified information does not recognize this risk from failing to share

Processes break in two ways. They break because they don't have the right checks and balances and because they don't have the right execution.

Safety is not just about trying really hard and being really careful. You have to design technology that makes it possible for a computer to be safe.

It turns out that we can build perfectly secure software, and yet people can still get hurt.

I think every organization needs to assume that they are compromised.

Every intelligence operation carries risks.

I wish we had been doing diplomatic security in Benghazi. I can tell you that Benghazi would not have happened if Blackwater were on the job there.

We should not be playing politics with the security and safety of our commuters.

The TSA is gambling with the security of civil aviation and expanding its scope irresponsibly. The problem with computerized passenger profiling is that it simply does not work.

We have the worst security!

It happened again this week. Hundreds of people had to be evacuated from O'Hare Airport in Chicago. Seems every time somebody went through with a weapon, the metal detectors accidentally went off.

(Technology reliability) x (Human reliability) = (System reliability)