Posted by antonaylward
Two points in this caught my attention.
Cannataci also argued forcefully that mass surveillance was not the way to
handle the threat from terrorism and pointed to a report by the Dutch
intelligence services that argues that point. "To get real terrorists, you have
to go for good old-fashioned infiltration," he argued, wishing that the security
services would spend less money on computers and more on real people who go out
and get real, actionable intelligence on what people are up to. "It's time to be
realistic and actually examine what evidence shows."
Where have I heard that before?
If you think technology can solve your security problems, then you don't
understand the problems and you don't understand the technology
-- Bruce Schneier
Essentially what he's saying is summed up by another Schneier quote:
People often represent the weakest link in the security chain and are
chronically responsible for the failure of security systems
-- Bruce Schneier, Secrets and Lies
I am currently available to offer InfoSec & GRC audit and consulting services through my company - System Integrity