This document appears to be a transcript of a talk given by Haroon Meer on October 17, 2010 about issues in the information security industry. Some of the main points discussed include that the infosec industry hides behind "fig leaves" and only fights battles they can kind of win, rather than taking on important problems. Meer argues that people in infosec think they can't write secure code, but some have shown this is possible. He calls for people to work on problems that really matter and produce more original research, rather than just consuming others' work.
17. So we build secure networks,
but cant protect our most prized user
and we write code,
that we know cant stand up to security
testing?
Sunday 17 October 2010