alt Hacker NewsThis is completely backwards. Cybersecurity has an attacker-defender asymmetry that heavily, HEAVILY favors defenders.
For starters, a defender gets to pick the surface area, an attacker has to work with what they're given.
Replies
paxys • today at 1:54 AM
This makes no sense. Why do defenders get to pick the surface area? You can be attacked from anywhere.
shepherdjerred • today at 2:35 AM
I think the point you're trying to make is that you can always make your exposed surface area smaller
But that, of course, is not going to survive contact with reality
The saying that stuck with me was "defenders have to be right 100% of the time, while attackers only have to be right once".
You are suggesting this isn't correct?
> a defender gets to pick the surface area
What do you mean? You don't pick what you need to defend. Unless you choose not to build a feature. But that's a product design choice... Not a cybersecurity strategy.