Predictions for 2007
Over at Emergent Chaos Chris Walsh has been busy savaging Paul Murphy's predictions for 2007. In particular Murphy's prediction that a class action will be brought asserting that using an operating system which competes with his pet favorite operating system represents an 'industry dumbest practice'.
Chris correctly points out that of the top 20 data breaches recorded at attrition.org the use of the operating system in question can be rulled out in 17 cases and in the other 3 cases we don't have enough information to judge. He is certainly correct in pointing out that running the most secure O/S on the planet won't help if your problem is that a thief stole your unencrypted backup tapes, or a laptop, or bribed your people, or did any of the things that are most likely to lead to a security incident.
The point that he does not make but should so I will make it for him is that if you are using security for this type of cheap point scoring you obviously don't take it as seriously as you should.
