An entire state's population (Maine) just had its data stolen in a ransomware attack

[usonian]

6. Bad guys have the advantage.

Sofiware is always flawed because it's made to cost. And fixes cost money, so it's wait in line. And, being commercial, new features come first, security comes last.

Open source is better because it has more eyes on it to fix it, and pride. OpenBSD Operating system is the most checked before release and almost nobody uses it.

Boss used to say to me to use windows "because everyone uses it". I told him that it's the most attacked one. Why? "because everyone uses it"

Bespoke solutions are best. Hardest to figure and least return on hacking.

The MOVEit software is widely used by businesses and government. Find one flaw, and you can hack hundreds.

The government is trying to push IT standards, but security costs money. "Good enough" isn't good enough.