Re: Outsourcing Firewalls/Internet Security count

[Bennett Todd <bet () rahul net>]

1997-12-05-19:41:48 Joseph S. D. Yao:
> I suspect we all currently outsource our telephone services, and think
> nothing of it.

Once again I cry, Speak for yourself.

We purchase a line many assorted lines to the outside, from different
vendors, but, like most businesses of any size, we own and operate our
own PBX. And _certainly_ like any business who records some
conversations as business records, we own and operate our own telephone
system and manage its security tightly.

> Why should we insist on being more private with our network services?

We don't; we can't even attempt to get it _as_ secure; the best we can
do is to do the best we can, which is sometimes nearly good enough.

By the way, I expect if your telephone system could directly access your
business data you'd not plan on outsourcing it.

> [...] If you outsource your firewall to someone with a reasonable clue
> level, you can probably trust them about as much as you trust the
> 'phone company.

Quite true --- and remember, you can't trust your phone company at
_All_. The amateur computer-burglar-crowd was a direct outgrowth of the
phone phreaks. Remember Cap'n Crunch?

> Would I do it? Not bloody likely. [...] So why am I arguing for
> out-sourcing?

So that other people will be easier to burgle than you?

-Bennett