Access Control Quotes

A country without a border is like a person in a house without a front door. Anybody can enter and you cannot ask anybody to leave.

The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards -- and even then I have my doubts.

Efforts to constrain encryption through forms of extraordinary access will inevitably introduce vulnerabilities into the security of consumer products in ways that are likely to have adverse long-term effects on the security, privacy, and civil liberties of citizens.

It is clear to me that creating a pathway for decryption only for good guys is technologically stupid. You just can't do that.

When a hacker gains access to any corporate data, the value of that data depends on which server, or sometimes a single person's computer, that the hacker gains access to.

Data leaks are impossible to reverse, so the best strategy is to prevent intruders from having prolonged, unfettered access to the systems in the first place.

I want to make it a little inconvenient for everybody to get to me.

I have met virtually no one in the policing and security world who thinks ID cards are an essential part of what they need to do in the future.

Power is generally defined as control over resources and control over access to resources, which often means control over other people because we're thinking about things like financial resources or shelter, or even love and affection, but we also possess resources that we sometimes can't access.

Hacking is exploiting security controls either in a technical, physical or a human-based element.

I am not fond of the idea of my shrubberies being always approachable.

It's as if our electric grid didn't even have fences around it. This is disgraceful what we do, and what we don't do, to protect the Internet.

National security always matters, obviously. But the reality is that if you have an open door in your software for the good guys, the bad guys get in there, too.

A company can spend hundreds of thousands of dollars on firewalls, intrusion detection systems and encryption and other security technologies, but if an attacker can call one trusted person within the company, and that person complies, and if the attacker gets in, then all that money spent on technology is essentially wasted.

Then, all of a sudden, here I am in the Press Room in the White House and walking in with the guards, who handed me three little pieces of paper asking me to send pictures to the guards at the White House.

Security people aren't brilliant; we aren't smarter than everyone else.

Oracle is obsessed with security. It's an absolute requirement for all our products. The real security issue is when customers take older products that were not built for the Internet, and kind of rack them and put them on the Internet.

I've always shied away from online data storage. I don't even use my employers' network drives for anything sensitive. I want to control access myself.

Classified information includes much more than the actual 'secrets' acquired. It includes how they were acquired and the process by which related analyses were made.

You can't have a back door that's only for the good guys.

As long as an attacker creates opportunities, everything is fine.

While I support access to both traditional hormonal contraceptives and Plan B, I absolutely believe that they should require a prescription/doctor supervision, particularly for minors.

Everything becomes connected, and cyber security becomes the top issue for CEOs. An average company has 40-60 security vendors, and they have a violation every three months with viruses.

I have spent my career building and improving secure, trustworthy systems, and I am very proud to be working on security at Yahoo.

Cloud computing is a challenge to security, but one that can be overcome.