21: The Security Mindset

This exercise is pending. Quick notes about this exercise:

• Don't let them in
  • Talk about how nothing protects you once they're on your machine. All you can do is mitigate damage for a little while, but eventually they'll get everything.
• The root Tautology "Attack"
  • Talk about the BS of supposed attacks that start off with "Assuming they have root..." If they have root then you're screwed, nothing stops that. It's better to do what you can to prevent access than to try to stop someone with access doing damage.
• Nothing is 100%
  • Discuss how security and quality is not a 100% thing but more a series of filters that reduce the probability of being exploiter.
  • Even then, someone with enough resources will hack you.
  • That's why you also need good monitoring, etc. etc.