No, Mark was right, macros can be whitelisted just like anything else. If you're allowing arbitrary macros, then you're not whitelisting.
-
-
Security and operations go hand in hand. Lots of orgs have vastly under invested in IT and lurch from one near miss to another - they're also still in business. I'm not about idealism because the trench reality is very different outside tech company budgets.
-
Is it idealism to give up on homeopathy when your patients start dying? You say "security and operations go hand in hand", but there exists no security today, and you argue for maintaining that status quo so as not to risk operations!
- 8 more replies
New conversation -
-
-
To continue my analogy, you probably shouldn't take the duct tape off while you're in the air, but you sure as hell need to get to safety and fix it properly asap, cause you're heading for disaster

-
This Tweet is unavailable.
New conversation -
-
-
This Tweet is unavailable.
-
Wheat. Chaff.
End of conversation
-
-
-
This Tweet is unavailable.
-
It's very realistic, and I have seen it. It's super easy to deploy antivirus, because it fails open, but whitelisting actually works so does require careful rollout.
- 2 more replies
-
-
-
Have you looked at most corporate networks recently? Duct tape & old tram tickets is pretty much all we have. Without falling on either side, on the one hand our AV and EDR tools don't detect much, but on the other it's only a matter of time and something will get in & game over
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Same goes for your house. It keeps your most important things. You can live without a front door or an alarm if you wish but you need to cope with the fact that sooner or later someone will get in uninvited.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
