,
3 tweets,
1 min read
Read on Twitter
There are many industrial control systems, Windows or not, that cannot be patched and are full of vulnerabilities.
This is not a problem. Patching is only one mitigation measure.
This is not a problem. Patching is only one mitigation measure.
The infosec community is full of small-minded jerks that focus on patching. It's not because they have experience with the problem. Instead, it's because their model of the world is that insecurity comes from moral weakness, greedy corporations and lazy users.
Yes, patching is important. But It's not some transcendental concept. It's only one of many important things. The most important things are whether the system remains up and functional.
