On 12/12/2018 17:56, nospam wrote:
In article , David B.
wrote:

So what about possible hidden malware which may *NOT* have (yet) been found?

what about it?

I know nothing about it. Nor do you!

assuming you obtain hardware and software from reputable sources, it's
a non-issue.

Hopefully so.

on the other hand, if you get a phone from someone at defcon, all bets
are off.

I 'm no longer in the armed services, so that's unlikely.

and your obsession over malware and anti-virus utilities is not normal.

That's absolutely right. Nowadays, hardly anyone cares.

Hrebs does, though! :-)

"Is it fair to judge an organization’s information security posture
simply by looking at its Internet-facing assets for weaknesses commonly
sought after and exploited by attackers, such as outdated software or
accidentally exposed data and devices? Fair or not, a number of nascent
efforts are using just such an approach to derive security scores for
companies and entire industries. What’s remarkable is how many
organizations don’t make an effort to view their public online assets as
the rest of the world sees them — until it’s too late."

https://krebsonsecurity.com/2018/12/...-for-security/

Read the article and educate yourself!

--
Regards,
David B.
New post today: https://vxer.home.blog/2018/12/08/vxer-a-profile/