What could have been done differently?

Tue Jan 28 10:42:05 UTC 2003

Sean,

--On 28 January 2003 03:10 -0500 Sean Donelan <sean at donelan.com> wrote:

> Are there practical answers that actually work in the real world with
> real users and real business needs?

1. Employ clueful staff
2. Make their operating environment (procedures etc.) best able
   to exploit their clue

In the general case this is a people issue. Sure there are piles of
whizzbang technical solutions that address individual problems (some of
which your clueful staff might even think of themselves), but in the final
analysis, having people with clue architect, develop and operate your
systems is far more important than anything CapEx will buy you alone.

Note it is not difficult to envisage how this attack could have been
far far worse with a few code changes...

Alex Bligh