Security Limitations Quotes

I don't expect an overnight change of all desktops to what the US Military used to call B3 level security. And even that would not stop users from shooting themselves into the foot.

It isn't that secrets are never needed in security. It's that they are never desirable.

Any private security is a joke in a country where you're up against your own government.

No government ought to guarantee perfect security because no government can provide it.

Well, the hardest thing to do, as we know from our own experience on 9/11 is protect everything all the time.

I do not think our security will ever be so effective that we can catch every bad person at the border, nor do I think we can expect our local law enforcement officers to anticipate and stop every violent crime or terrorist act.

Microsoft made a big deal about Windows NT getting a C2 security rating. They were much less forthcoming with the fact that this rating only applied if the computer was not attached to a network and had no network card, and had its floppy drive epoxied shut, and was running on a Compaq 386. Solaris's C2 rating was just as silly.

But all that having been said, you can't, in a city of a million people like Karbala, or 5 million like Baghdad, you can't be in all places at all times.

The reality is that terrorists can attack any time at any minute, 24 hours a day, using a variety of techniques, in any place at all. And it's not possible to defend in every place, against every technique, against every conceivable approach. It means that you can't stop every terrorist attack. Innocent men, women and children are going to be killed if terrorists are determined to do it.