<div dir="ltr">Something caught my eye:<br><div><div><br></div><div><span style="color:rgb(51,51,51);font-family:Verdana,Arial,sans-serif;font-size:13px;line-height:16px"> "He emphasizes the role of encryption to defeat many defensive tools, but ignores that security and information technology architects regularly make deployment decisions to provide visibility in the presence of encryption."</span><br>
</div><div><span style="color:rgb(51,51,51);font-family:Verdana,Arial,sans-serif;font-size:13px;line-height:16px"><br></span></div><div>Meta Data matters, even just the patterns that are used in transmitting data could matter. There potentially could even be signature matching on protocols like voip that could give attackers a signature to match to a person. An argument could be made that Meta Data matters to some people at some level. Encryption is only a finite means to an end. If intelligence data and its importance only has a finite life then encryption may be good enough for the moment that it is needed for. At the same time, you can from a defense point of view understand that bad stuff is happening even if encryption is used. </div>
<div><br></div><div>As for the comments above, if I have learned anything in my career it is that I have only been that much better because I have had to be on both sides and have had my offensive skills influence and feed my defensive skills. The same can almost perfectly said of the inverse. </div>
<div><br></div><div>Oh and</div><div><br></div><div> "<span style="font-size:13px;font-family:arial,sans-serif">Look, Richard Beitlitch </span><a href="http://taosecurity.blogspot.com/2014/02/the-limits-of-tool-and-tactics-centric.html" target="_blank" style="font-size:13px;font-family:arial,sans-serif">thinks I don't know anything about "Strategy"</a><span style="font-size:13px;font-family:arial,sans-serif">."</span></div>
<div><span style="font-size:13px;font-family:arial,sans-serif"><br></span></div><div><font face="arial, sans-serif">I will be the first to admit, compared to someone who has lived and breathed warfare, I don't know If I could claim I know anything about strategy. What I can tell you is this, we need better tools to go hand in hand with 'people and process', so I'm excited to see Innuendo in action. </font></div>
<div><font face="arial, sans-serif"><br></font></div><div><font face="arial, sans-serif">m</font></div><div><font face="arial, sans-serif">@mosesrenegade</font></div></div><div><font face="arial, sans-serif"><br></font></div>
<div><font face="arial, sans-serif">Full Disclosure: The opinions here do not reflect the opinions of my Employer.</font></div><div><font face="arial, sans-serif"><br></font></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Tue, Mar 11, 2014 at 12:28 PM, Justin Seitz <span dir="ltr"><<a href="mailto:justin@immunityinc.com" target="_blank">justin@immunityinc.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Weird I couldn't see Richard's response through all the marketing for<br>
his products and books. Must have been the thick cloud of big data APT<br>
threat intelligence in the way.<br>
<br>
I guess I also find it funny that there are a number of defense folks<br>
who love to use/paraphrase this statement Richard makes:<br>
<br>
"First, I recognized that it's written by someone who is not responsible<br>
for defending any network of scale or significance."<br>
<br>
Right. Offensive firms (you all should be pissed by this statement by<br>
the way) are not responsible for defending networks. Period.<br>
<br>
Posts like this, Richard, are why I turn off Twitter by 9am most days.<br>
<span class="HOEnZb"><font color="#888888"><br>
Justin<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
Dailydave mailing list<br>
<a href="mailto:Dailydave@lists.immunityinc.com">Dailydave@lists.immunityinc.com</a><br>
<a href="https://lists.immunityinc.com/mailman/listinfo/dailydave" target="_blank">https://lists.immunityinc.com/mailman/listinfo/dailydave</a><br>
</div></div></blockquote></div><br></div>