> I've been a vulnerability researcher since around 1995. I feel significantly better about security today than I have at any point in the past.
Do you really feel that way considering what is internet (or other accessible networks) connected today compared to 1995?
Personally I feel the opposite (although I haven't been in the game as long) because of a lot of critical infrastructure is getting connected without a lot of security. A lot of surveillance cameras, door stations, networks that in 1995 would be localized failures are now national or global. People find open, password-less VNC into control panels for powerplants just by scanning the internet. Equifax, Turkeys MERNIS and on and on and on.
I don't get the sentiment that things are getting better in this area.
Do you really feel that way considering what is internet (or other accessible networks) connected today compared to 1995?
Personally I feel the opposite (although I haven't been in the game as long) because of a lot of critical infrastructure is getting connected without a lot of security. A lot of surveillance cameras, door stations, networks that in 1995 would be localized failures are now national or global. People find open, password-less VNC into control panels for powerplants just by scanning the internet. Equifax, Turkeys MERNIS and on and on and on.
I don't get the sentiment that things are getting better in this area.