In a recent short blog entry, I pointed you to Wayne Rash's column and added a few suggestions of my own. A friend was singulary unimpressed. I suspect that it is because Wayne's column -- and my enthusiastic support of it -- isn't "the sky is falling" enough for some security folks. Maybe I am getting too old for this. I rather believe that after 18 years of doing this, I have a good sense of real risk. There is a sense that "a little paranoia is a good thing" in network security. That is wrong. Paranoia is a disorder. It is irrational. A clear sense of real risk is what we need.
All to say, here is another call for calm that my friend might not like as posted in The Register.